CI/CD and infrastructure-as-code abuse

AI agents ran more than 50 ATT&CK techniques through one enterprise in under 10 hours

Unit 42 worked a ransomware intrusion where the operator handed tactical execution to frontier AI agents, and the chain from a public API endpoint to stolen cloud AI keys closed inside a single working day with no zero-day.