A Russian-speaking actor ran hundreds of autonomous AI agents through a full PaperCut-to-domain-admin intrusion chain across 395 organizations, and some agents ignored their own operator's targeting instructions.
An Aurora ransomware affiliate used Cursor's AI coding assistant to conduct live network intrusion across 20 organizations, and the safety bypass required no technical exploit, just a different conversational frame.
CISA's dual red team assessment reveals a government SOC with zero confirmed detections and a water utility that caught the same team in hours: the difference was not budget or tooling, it was signal quality.
Security