博思艾伦：2026 AI 驱动高速网络攻击洞察报告（英文版）（17页）.pdf

1、When Cyberattacks Happen at AI SpeedMost defense strategies were not designed to operate at the speed of AI.This shift affects government and private enterprises alike.Federal agencies,defense systems,critical infrastructure operators,and large corporations now face the same reality.Weaknesses in co

2、mmercial systems can become entry points into government missions and the reverse.The threat environment is shared,and so are the consequences.The problem is time.Most cyber defenses still run on human timelines.Analysts review alerts,teams escalate incidents,and leaders weigh operational risk befor

3、e approving contain-ment actions.That process can take hours or days because it was designed for threats that unfolded slowly and allowed time for investigation.AI-enabled attackers move in minutes.When attackers move faster than defenders,they control the fight.The gap between speed of attack and t

4、ime to respond is widening.In 2025,the average breakout time from initial access to ability to move into other systems dropped to under 30 minutes,with the fastest cases measured in seconds.AI-enabled tools now automate reconnaissance,generate exploits,and scan thousands of systems simultaneously.Sm

5、all teamsor even single operatorscan run campaigns that once required large,coordinated groups of specialists.AI is also accelerating how offensive tools are built.Operators define the objective and constraints,and language models generate code,test it,and refine it until it works.Development cycles

6、 that once took weeks now take hours.Social engineering has always worked;AI allows attackers to produce convincing emails,documents,and tailored personas at an industrial scale.Techniques that once remained inside elite units spread quickly across criminal ecosystems.Cyber conflict has entered a ne