Agentic AI Enables Rapid Enterprise Attacks and Expands Threat Actor Capability

Palo Alto Networks Unit 42 warned that frontier and commercially available agentic AI is shifting offensive capability toward attackers, enabling lower-skilled actors to conduct vulnerability discovery, reverse engineering, malware development, social engineering, and other attack-chain activities at machine speed. In an investigation involving a customer, Unit 42 said an attacker reportedly used an agentic framework to exploit 50 applications and other enterprise weaknesses in under 10 hours, including exploitation, privilege escalation, and data theft.

Unit 42 said AI is already supporting malware creation, task delegation, ransomware negotiations, and reconnaissance, while making attribution more difficult. It identified identity compromise, software supply-chain exposure, and nation-state discovery of enterprise weaknesses as key risks, and urged organizations to adopt zero-trust controls, continuously train employees, govern internal AI use, and build adaptable security strategies for agentic AI.