Loading story…
A 72-hour offensive-security competition on Hack The Box (NeuroGrid) generated a large controlled dataset comparing AI-augmented teams to human-only teams across 36 challenges in nine domains. Results showed AI-assisted teams were more likely to complete at least one challenge (about 73% vs 46% for human-only teams), with the largest advantage among lower-ranked participants and a narrowing gap at higher skill tiers; at the elite tier, the top human team still outscored the top AI-augmented team by total solves. The AI advantage varied by difficulty (strongest at easier/medium tasks, weaker on the hardest challenges where AI teams failed to complete three challenges), while speed differences depended on skill tier—AI teams were slightly slower on average overall, but top AI-augmented teams solved challenges several times faster than elite human-only teams.
Separate industry commentary warned that autonomous AI agents (systems that can execute code, call APIs, browse the web, and chain actions across enterprise tools) undermine assumptions behind traditional, static security controls, with risks including training-time poisoning, runtime prompt injection/jailbreaks, and “drift” that only becomes visible after harm occurs. Other items in the set were largely general trend or career content rather than reporting on the competition/agent-security problem: a regional threat-volume writeup cited Check Point data that Latin America faces substantially higher weekly attack volumes than the US (with higher observed shares of ransomware and infostealer activity), a vendor blog discussed mobile-risk shifts driven by regulation and AI-driven development, a feature promoted applying SDLC-style processes to governance/human-error risk (including an upcoming conference session), and a CSO career article primarily focused on role/job-market considerations.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Results published from the NeuroGrid dataset found AI-augmented teams had higher overall completion and solve rates than human-only teams, especially among lower-ranked participants, while elite human teams still led on the hardest problems. The report also highlighted faster top-tier AI-assisted performance and warned that defenders should adapt to faster AI-augmented adversaries.
A 72-hour NeuroGrid cybersecurity competition on Hack The Box was conducted across 36 offensive security challenges in nine domains and four difficulty levels to compare AI-augmented teams with human-only teams. The event produced a controlled dataset on relative performance in offensive security tasks.
An SC Media perspective argued that autonomous AI agents break traditional security assumptions because they can be manipulated through training-data poisoning, prompt injection, jailbreaks, tool misuse, and multi-step interactions with sensitive systems. It recommended continuous red teaming, real-time stateful guardrails, and centralized governance across the AI lifecycle rather than point-in-time or isolated controls.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
An expert-authored **International AI Safety** report says AI agents are increasingly being used to support multiple stages of cyberattacks, with notable gains over the past year in vulnerability discovery and malicious code generation. The report cites results from DARPA’s AI Cyber Challenge where finalist systems autonomously identified **77% of synthetic vulnerabilities**, and notes criminal use of AI tooling (e.g., *HexStrike AI*) to accelerate exploitation soon after public vulnerability disclosures; it also describes a growing market for “weaponized” models that can generate ransomware and data-stealing code at low monthly cost. Despite these advances, the report assesses that **fully autonomous, end-to-end, multi-stage attacks** are not yet commonly observed because current AI systems struggle to reliably execute long, complex sequences without human oversight, including poor error recovery and irrelevant command execution. Separately, CSO Online highlights risk-management concerns that large numbers of deployed **AI agents** could “go rogue,” underscoring governance and control challenges as organizations operationalize agentic AI at scale.
Jun 29, 2026
Security researchers and vendors documented rapid progress in using large language models and autonomous agents for offensive security testing, from early machine-learning-driven exploitation in **Deep Exploit** to newer multi-agent systems such as **BLADE** and Mastra-based workflows. In controlled demonstrations, these systems automated parts of reconnaissance, privilege-escalation analysis, credential discovery, lateral movement, and reporting, while broader evaluations found modern models increasingly capable of code understanding, vulnerability reasoning, and black-box web assessment tasks. The reporting also highlighted industry milestones such as AI-assisted pentesting tools reaching top bug bounty rankings and the growing use of agent patterns including **ReAct**, **Plan-and-Execute**, and orchestrated multi-agent designs for security assessments. At the same time, the same body of work warned that AI-for-security deployments are creating new attack surfaces. Researchers observed internet scanning for exposed OpenAI-compatible `Chat Completions` endpoints, with likely goals including fingerprinting LLM servers, abusing unauthenticated inference, causing denial of service, and reaching downstream integrations such as **RAG**, tool calling, and URL fetching. Separate analysis warned that long-term memory in AI agents can preserve attacker-influenced instructions, stale conclusions, or misleading context across sessions, making provenance, freshness, access control, correction, and deletion critical controls. Across the studies, the message was consistent: AI agents are becoming more useful for security operations and testing, but their deployment requires strict governance, authentication, and safeguards against prompt injection, unstable execution, and low-quality automated findings.
Aug 15, 2026
Security and technology outlets highlighted a growing shift from *GenAI copilots* toward **agentic AI**—systems that can take actions autonomously or semi-autonomously—alongside warnings that governance and oversight are not keeping pace. Commentary in SC Media argued that as enterprises orchestrate hundreds or thousands of agents, traditional *human-in-the-loop* review becomes a scaling bottleneck, pushing organizations toward **human-on-the-loop** monitoring and policy-based exception handling; separate SC Media analysis cautioned CISOs to temper “hype vs. reality” expectations around agentic AI in SOC use cases due to reliability and oversight concerns. Related coverage emphasized adjacent AI risk themes, including research/analysis calling for AI systems to be constrained by values such as fairness, honesty, and transparency, and reporting on “shadow AI” contributing to higher insider-risk costs as employees use unsanctioned tools and workflows. Several items focused on operational and data-security implications of AI-enabled automation. Security Affairs described AI-assisted incident response as a way to accelerate investigations by correlating telemetry across tools, enriching alerts, and producing summaries faster than manual analyst workflows, while a SecuritySenses segment similarly framed AI as best suited for summarization/enrichment and repetitive tasks, with deterministic decisions retained by humans and with attention to securing agent communications (e.g., OWASP guidance for agents). CSO Online reported a specific AI-adjacent exposure risk: a **Google API key change** characterized as “silent” that could expose *Gemini* AI data, and also noted concerns that personal AI agents (e.g., “OpenClaw”) could be influenced by **malicious websites**. Other references in the set were unrelated to this AI/agentic-operations theme (e.g., ransomware impacting a Mississippi healthcare system, China-linked espionage using Google Sheets, legal rulings on personal data, and general conference/event or career items).
Jun 29, 2026