Skip to content
AI-Driven Attacks Accelerate SOC Response Challenges

AI-Driven Attacks Accelerate SOC Response Challenges

First seen 3 Nov 2026, 10:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 17:17 UTC
  • •Attackers can now exfiltrate data in just 72 minutes, a significant increase in speed.
  • •Manual triage processes in SOCs are inadequate against modern AI-driven threats.
  • •Adopting agentic AI solutions is critical for improving incident response times.

Cybersecurity operations are facing a significant speed gap as attackers leverage AI to compress attack timelines. Recent findings indicate that adversaries can move from initial access to data exfiltration in as little as 72 minutes, a fourfold increase from the previous year. Security operations centers (SOCs) are struggling to keep pace with these rapid developments due to reliance on manual triage processes. The articles emphasize that the traditional handoff between security and IT operations is no longer viable, necessitating a shift towards agentic AI solutions for faster incident response. Organizations are encouraged to adopt automated triage and incident response capabilities to mitigate risks effectively. The urgency for SOCs to evolve their processes is underscored by the increasing sophistication of AI-driven attacks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-29
Unit 42 report on attack timelines
Unit 42 revealed that attackers are achieving data exfiltration in as little as 72 minutes, highlighting the speed gap in SOC responses.
unit42.paloaltonetworks.com
2026-11-03
DXC discusses agentic AI in SOCs
DXC emphasizes the need for SOCs to implement agentic AI to keep pace with the evolving threat landscape and improve response times.
Cybersecurity-Insiders

More articles in this cluster (2)

Following this threat?

Track DXC Technology in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (1)

1 / 2

Common questions

What is the average time for data exfiltration?
Recent reports indicate that attackers can exfiltrate data in as little as 72 minutes.
How are SOCs responding to these challenges?
SOCs are encouraged to adopt agentic AI solutions to automate triage and incident response processes.
What are the implications of AI in cyber attacks?
AI allows attackers to automate and accelerate various stages of the attack lifecycle, making traditional defense methods less effective.