AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs

The key question for security leaders is whether attackers can now move faster than existing controls can contain them. One practical test is to compare how quickly a realistic attack path can reach a critical system with how long the organization actually takes to detect and contain it.

Grover said agent-assisted red-team exercises could be used to measure that gap. If an attack path can be completed before containment takes effect, the weakness is structural rather than hypothetical.

“The principal risk is not that AI suddenly creates entirely new attack techniques,” she said. “It lowers the time, expertise, and cost required to execute existing techniques concurrently and at scale.” For boards, the issue is less about whether AI-enabled ransomware is an emerging threat than about whether existing controls can stop a credible attack path before it reaches a critical business system.