CrowdStrike identifies AI agents conducting autonomous cyberattacks

Four previously unreported threat actors used agentic AI to run intrusions with limited human involvement, hitting healthcare, government and SaaS targets The hackers of the future may not need to be very good at hacking. They just need an AI agent that is. Cybersecurity firm CrowdStrike says it has identified four previously unreported threat actors using agentic artificial intelligence to carry out cyber intrusions. The AI handled reconnaissance, exploitation and data theft, often making operational calls with limited human oversight. The targets spanned healthcare, government, software-as-a-service providers and other private-sector industries across multiple countries. What CrowdStrike found According to CrowdStrike’s research, the threat actors used AI coding assistants and so-called harnesses. These setups connect powerful language models to external tools, which lets the model move beyond generating text and start acting on systems. The four actors were identified as Spanish/English, Chinese, Indonesian and Russian-speaking groups. Their campaigns were documented between mid-May and mid-August 2026, as detailed in CrowdStrike’s October 2026 report. One case stands out. A sin...