VULNpocalypse
InformationalEcosystem changeMonitoring

Palo Alto Networks CEO says AI is driving faster cyberattacks, ETCISO reports

Palo Alto Networks CEO says AI is speeding up cyberattacks, ETCISO reports; test exposed infrastructure for known flaws and misconfigurations.

Published
Exploitation
Not confirmed, the CEO says attacks are seen in the wild but the source names no specific exploited vulnerability

What happened

According to ETCISO, Palo Alto Networks CEO Nikesh Arora says cyberattacks are becoming more frequent and faster, and that hacking incidents will accelerate. The article attributes this to automation and wider availability of AI capabilities. This is a commentary from a vendor executive. It is not an incident disclosure, and the source gives no figures, victims or named attackers.

ETCISO reports these points from Arora:

  • He says he predicted six months ago that “Mythos like capability” would become widely available, and that “it’s happening.”
  • He says attacks are not more sophisticated. He describes them as the same attacks, done faster and by more people.
  • He says attack path discovery that once needed trial and error is now trivial with help from open source LLMs.
  • He says supply chain partners and marketplaces with access to your infrastructure are an easier attack vector.

ETCISO also says his comments came days after responders patched critical vulnerabilities in PHP. The source gives no CVE IDs, affected versions or fixed versions for those PHP issues, so those details are not confirmed.

Am I affected?

The source describes a general trend and does not identify specific affected products or organisations. Specific exposure is not confirmed. According to ETCISO, Arora’s guidance is aimed at organisations with these characteristics:

  • Old or insecure perimeter infrastructure.
  • Suppliers or upstream and downstream partners with access to their infrastructure.
  • Developers using AI coding tools.

If you run PHP, the article mentions recent critical vulnerabilities but does not say which versions are affected.

What to do now

These steps follow the advice Arora gave, as reported by ETCISO:

  1. Test your infrastructure for accessible vulnerabilities and misconfigurations.
  2. Fix your own code, and ask your vendors to fix theirs.
  3. Update old or insecure perimeter infrastructure first.
  4. Put a security framework in place for new AI tools, especially coding tools.
  5. If you run PHP, check the PHP project’s own security announcements for the recent fixes. The versions are not confirmed in this source.

Sources