“This is significant because AI is taking on the coordination of an intrusion, using each result to decide what to try next and reducing the hands-on effort required to pursue multiple targets,” he said. “That changes the economics of targeting. An attacker can sustain pressure across more organizations without personally directing every step. An organization’s risk can rise even when its vulnerabilities haven’t changed.”
Greis noted that the altered ballot deserves attention because it shows how an intrusion can undermine the information people rely on to make decisions. “Alongside detecting data theft, CISOs should monitor unauthorized changes to critical records and privileged access and test their ability to verify and restore trusted information after an incident,” he said. “Resilience includes knowing that the information you are using to run the business can still be trusted.”
The model’s process
The report included a detailed description of the campaign’s methodology. “Cairn coordinated its activities through a shared blackboard,” it said. “Agents read the blackboard and wrote their findings back as a fact-intent graph, while human operators can inject hints at any time to help guide the operations if needed. Confirmed findings accumulate as immutable facts and the agent queues its next actions as intents. Attackers ran a customized fork of Cairn from a server hosted in Hong Kong, and hosted an attack egress and staging node in the US.”
