AI-driven cloud attacks reach 'functional' maturity, says Unit 42 | news

A model agnostic proof-of-concept (PoC) run by Unit 42 has found that AI-driven cloud attacks have reached functional maturity and can chain reconnaissance, exploitation, privilege escalation, and data exfiltration with minimal human guidance.

In an April 23 blog post , Palo Alto Networks researchers at Unit 42 said that while the attacks aren’t novel, the effective use of automation means operations that once required specialized expertise can get orchestrated by AI agents.

Unit 42 researchers said they named the PoC agent " Zealot ," a reference to a type of warrior in a popular video game. The researchers said the name reflects the PoC’s role as a fast, high-performance frontline tool designed for automation in cloud environments.

“The PoC is valuable, but we need to interpret it carefully,” said Heath Renfrow, co-founder and CISO at Fenix24. “What Zealot demonstrates is not autonomous ‘AI hacking’ in the wild. It demonstrates that AI can orchestrate known techniques against a pre-weakened environment when given a clear objective and sufficient tooling. That’s an important distinction.”

Renfrow said the takeaway isn’t that “AI changes everything.” It’s more specific-and more urgent, such as:

Kevin Surace, chair at TokenCore, said what made this PoC dangerous was not a new zero day — it was a supervisor agent coordinating specialist agents for infrastructure, application exploitation, and cloud operations, while chaining server-side request forgery (SSRF) , metadata credential theft, service account impersonation, identity and access management (IAM) enumeration , and BigQuery exfiltration with a shared attack state.

“That tells CISOs something important,” said Surface. “Offensive AI is already capable of stitching together known cloud weaknesses at machine speed, which means ordinary misconfigurations now carry far more risk than most teams assume.”