🔍 Read the full analysis: What AI’s Faster Cyberattacks Mean For Companies And Users on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
US agencies say attackers are using AI-generated scripts against internet-reachable industrial controllers, while Microsoft reports an AI agent was used in a campaign targeting cloud tenants through a compromised backup app. Microsoft says most targeting attempts failed, and that an affected app or successful sign-in does not by itself prove data was accessed. The reports point to faster attack operations, not proof that AI makes attacks inevitable.
US agencies and Microsoft have reported attackers using AI-generated scripts against industrial controllers and an AI agent in a campaign targeting cloud tenants through a compromised backup application. The reports document ways AI can speed up routine attack steps, but they do not show that most attempts succeeded: Microsoft said the majority of the targeting it observed was unsuccessful.
A joint August 18 advisory from the NSA, CISA, FBI, Department of Energy and Environmental Protection Agency said actors were conducting reconnaissance and developing capabilities against internet-reachable Siemens S7 programmable logic controllers. These devices are industrial computers used to control processes such as pumps, valves and production lines. The agencies said attackers used AI-generated exploitation scripts disguised as monitoring tools and built with the open-source snap7 library. They assessed the activity as likely preparation for operational effects against critical infrastructure.
In an October 21 report, Microsoft Threat Intelligence said the China-state-aligned actor Storm-0940 used the open-source ARTEX multi-agent penetration-testing framework in activity connected to the compromise of ConnectWise Cloud Backup. Microsoft said the actor used credentials associated with the cloud backup app to attempt sign-ins to more than 2,250 tenants. It also recorded more than 151,000 failed logons in a password-spraying campaign from October 10 to 14, peaking at 2,900 failures per minute; Microsoft said none of those attempts succeeded.
Microsoft reported that in several attacks, the period from initial targeting to privileged cloud access was under three hours. It also cautioned that most targeting was unsuccessful and that an affected app or successful sign-in does not necessarily mean data was accessed. ConnectWise said existing backup archives showed no indication of compromise and said it suspended Cloud Backup, SaaS Security and Cloud Management while investigating.
Infographic 01 · The record so far
AI is in the attacker’s toolchain. On the record.
Six documented events in twelve weeks. Each label says what the source itself states about AI. Figures are the vendors’ and agencies’ own.
- 30 Jul 2026Unit 42: AI on attackDeepSeek inside the Hermes Agent framework picks and switches targets on its own. Limited impact: across autonomous and manual attempts, data theft from 3 NetScaler systems confirmed. Single-vendor report.
- 18 Aug 2026NSA, CISA, FBI, DOE, EPA: AI on attackAI-generated exploitation scripts, disguised as monitoring tools, against Siemens S7 PLCs in US critical infrastructure. “Not a theoretical risk.”
- 10–14 OctStorm-0940 password spray: AI on attack151,000+ failed logons across eight organizations. No successful sign-in. Lockouts made up nearly 98% of responses.
- 16–21 OctConnectWise Cloud Backup: AI on attackStolen app credentials, then machine-speed sign-ins to customer tenants. Microsoft attributes it to the China-state aligned Storm-0940.
- 21 Oct 2026OpenAI, Patch the Planet: AI on defenceAI found the critical PHP flaws before attackers did. OpenAI expects similar findings to “increase sharply in the coming months.”
- 21–22 OctQuest Diagnostics: no AI link reportedUnauthorized access to a lab ordering and results system; certain patient records accessed. No cause or attacker named.
Most AI-driven attempts in these reports failed. What changed is the cost of trying.Assessment: Thorsten Meyer
Sources: Unit 42 (30 Jul 2026); NSA, CISA, FBI, DOE, EPA advisory (18 Aug 2026); Microsoft Threat Intelligence (21 Oct 2026); ConnectWise Trust Center (from 16 Oct 2026); OpenAI, Patch the Planet (21 Oct 2026); Quest Diagnostics Form 8-K (22 Oct 2026).
Powered by Thorsten Meyer AI
Faster Attacks Put Pressure on Defenses
The reports matter because they describe AI helping with recognizable parts of an intrusion: reconnaissance, adapting scripts, trying credentials and moving through connected services. Automation can let attackers repeat these tasks quickly and for longer periods. Microsoft said agents can work around the clock; that describes a capability, not proof that every campaign is fully autonomous or successful.
For companies, the reported timelines leave less room to notice unusual access and respond before an attacker reaches privileged systems. A vendor or app trusted by an organization can also become a route into its cloud environment, as the Microsoft account illustrates. For users, compromised email or reused passwords can expose access to other services. These are practical security risks, but the reports do not establish that AI has made attacks impossible to stop.
AI may also help defenders find and fix flaws. OpenAI said AI identified critical vulnerabilities in PHP that were patched on October 21, and forecast that AI-found critical vulnerabilities would increase sharply in coming months. That is a company forecast, not a measured prediction of how many flaws will be found or how quickly organizations will patch them.
Products Worth Considering
Trezor Safe 5 Crypto Hardware Wallet with Color Touchscreen, Black Graphite
LG UltraGear 32GX850A-B 32-inch 4K UHD Glossy OLED Gaming Monitor
Logitech MX Mechanical Full-Size Wireless Mechanical Keyboard, Tactile Quiet Switches, Backlit Keys, Bluetooth, USB-C, Multi-Device, Graphit
As an affiliate, we earn on qualifying purchases.
Three Reports, Different Evidence
The evidence cited here comes from separate reports and should not be treated as one coordinated campaign. The government advisory concerns activity against industrial control systems; Microsoft’s report concerns a supply-chain route into cloud tenants; and Palo Alto Networks’ Unit 42 described a separate case involving an AI agent used in targeting activity. Each account documents a different use of automation.
Unit 42’s July 30 report described a Chinese-speaking actor using the DeepSeek model with the Hermes Agent framework and directing it through Telegram. The source material also describes OpenAI’s report about AI finding PHP vulnerabilities before they were patched. These examples show that AI is being used on both sides of security work, but do not establish how common such use is across all attacks.
The agencies’ recommended steps for exposed Siemens controllers include inventorying devices, updating firmware, removing internet access, blocking TCP port 102 at the perimeter, separating IT and operational technology networks, requiring multifactor authentication for remote OT access, and monitoring controller traffic for writes outside approved change windows.
“The majority of the targeting wasn’t successful.”
— Microsoft Threat Intelligence
Success and Scale Remain Unclear
The reports do not establish how often AI-assisted methods are being used across cyberattacks, or how much of the activity would have occurred without AI. The source material provides particular cases and agency assessments, not a broad measure of prevalence. It also does not show that every step in the described campaigns was carried out without human direction.
For the ConnectWise incident, Microsoft’s account includes unsuccessful targeting and warns that sign-ins do not prove data access. ConnectWise said its existing archives showed no indication of compromise, but the investigation was ongoing. The available information does not settle the full impact on customers or establish that every tenant targeted was affected.
OpenAI’s expectation of a sharp rise in AI-found vulnerabilities is a forecast. A security leader quoted in the source material predicted a coming “vulnerability tsunami” and said organizations may have roughly 18 months to prepare; that is an individual opinion, not a measured outlook. The source material does not provide a basis for treating that timeline as a confirmed deadline.
Investigations and Patch Work Continue
ConnectWise’s investigation and the status of its suspended services will help clarify whether the reported compromise led to customer data access or other effects. Organizations using affected services should follow vendor and government updates and review relevant sign-in and application activity. The reports provided no final investigation findings or firm timetable for a complete account of the incident.
Companies can act on the risks already identified without waiting for predictions about AI. That means maintaining an accurate inventory, setting patch deadlines, reviewing third-party app permissions, using phishing-resistant sign-in where available, separating operational technology from business networks, and practising incident response. Users can begin by securing their email accounts with unique passwords and multifactor authentication, since email often provides a route to reset access to other services.
Further government advisories, vendor findings and vulnerability patches will show whether the reported techniques expand and how defenders respond. For now, the confirmed development is that attackers have used AI-assisted tools in documented cases; the scale and ultimate impact remain unsettled.
Key Questions
Did the AI-assisted attacks succeed?
Some activity reached privileged cloud access in several attacks, Microsoft reported, but it said most targeting was unsuccessful. It also cautioned that a successful sign-in does not by itself show that data was accessed.
Which industrial systems did US agencies identify?
The agencies warned about activity targeting Siemens S7 programmable logic controllers, including models from the S7-200 to the S7-1500. They said the controllers of concern were reachable from the internet.
What does the ConnectWise report confirm?
Microsoft linked Storm-0940’s use of ARTEX to activity following the ConnectWise Cloud Backup compromise and described tenant-targeting attempts. ConnectWise said existing backup archives showed no indication of compromise; the full impact remained under investigation.
Does this mean AI cyberattacks are now widespread?
The reports document specific cases, but do not establish how common AI-assisted attacks are overall. They show that attackers have used AI-generated scripts and agent frameworks; they do not quantify the share of attacks involving those tools.
What should companies and users do now?
Companies should review exposed systems, patching, third-party app permissions, remote access and incident-response plans. Users should secure their email accounts with unique passwords and multifactor authentication. These steps reduce common access risks but cannot guarantee protection from every attack.
Source: ThorstenMeyerAI.com
