Unit 42 Warns AI Could Lift Script Kiddies to State-Actor Level Within 10 Hours
Updated
Updated · ZDNet · Aug 27
Unit 42 Warns AI Could Lift Script Kiddies to State-Actor Level Within 10 Hours
1 articles · Updated · ZDNet · Aug 27
Summary
Unit 42 says AI is driving a “generational shift” in cyber risk, making it probable that low-skill hackers and hacktivists gain capabilities once associated with state-sponsored groups.
In internal tests, the Palo Alto Networks team used AI to complete roughly 1-2 years of penetration testing in three weeks, and said AI could identify, exploit, escalate privileges and steal data in 10 hours instead of two weeks.
That speedup matters because AI is no longer limited to isolated tasks like phishing or translation; Unit 42 said it is increasingly being applied across the full attack chain, citing JadePuffer as a believed fully agentic ransomware case.
Sherrod DeGrippo said AI could revive Anonymous-style hacktivism and make attribution harder, while also enabling disgruntled individuals or other socially motivated actors to launch more sophisticated attacks.
For defenders, Unit 42 said organizations still are not ready and should focus on zero-trust access, stronger employee training, tighter controls on shadow AI and outside AI-security expertise.