I pulled together every AI-security incident from August. The number that stood out: AI-agent exploits are now the single largest attack-vector category, ahead of credential theft, zero-days, supply chain, phishing, and ransomware — each counted individually.

The month in numbers: 123 incidents, 23 critical and 97 high severity, across 38 named organizations, 331M+ records exposed. 65 incidents involved AI as the weapon or the target. Attack vectors broke down as: AI-agent exploits (37), credential theft/reuse (28), zero-days (23), supply chain (12), phishing (9), data exfiltration (8), ransomware (6).

The stories that stood out:

- McKesson: 284M records, the largest single breach of the month by a wide margin.

- Carhartt (12.9M), Exact Sciences (10.9M), and CareCloud (3.7M) round out the biggest named incidents — three of four sit in or next to healthcare.

- Five confirmed RCEs landed across Microsoft SharePoint, Windows, F5/nginx, and the PyPI package index twice.

- Two separate PyPI supply-chain poisoning campaigns, plus a compromise of n8n, an AI workflow automation platform.

Every one of the breached companies almost certainly runs a modern security stack — CrowdStrike, Okta, Palo Alto Networks, Microsoft Defender, that class of tooling. None of it stopped these incidents, because none of it operates at the point where a credentialed agent actually acts, or where a poisoned dependency resolves at build time.

Full report, with the specific control that maps to each incident: https://runtimeai.io/blog/2026-08-monthly-breach-report.html

Genuinely curious how others are approaching this: is anyone actually testing whether their existing guardrails hold against a real simulated attack, or is it still mostly an assumption that they will?

I’ve conducted a small analysis and would be glad to hear your opinion.
I've been looking at how AI may change the underlying dynamics of offensive and defensive cybersecurity.

My main question is not simply whether AI makes attacks more powerful. The more important issue may be how much it compresses the time available for human-driven defense.

A few observations seem particularly important:

1. The main change may be the economics of attack

AI can significantly reduce the cost and effort required to discover vulnerabilities, generate attack techniques, adapt tooling and scale operations.

The important shift may therefore be less about making individual attacks more sophisticated and more about making sophisticated capabilities available at much lower cost and much greater scale.

2. The attack cycle may become shorter than the human decision cycle

The timeline from vulnerability discovery to exploitation has already been a major security concern. If AI continues to compress this from weeks to days, hours or potentially minutes, human analysts may no longer be able to remain a primary component of the defensive response loop.

That creates a different problem: security systems may increasingly have to operate at machine speed.

3. The traditional patch cycle may become insufficient

The classic model:

discover → analyze → patch → test → deploy

assumes that defenders have enough time to complete the cycle.

If exploitation occurs before an organization can complete that process, patching remains necessary but may no longer be sufficient as the primary response mechanism.

4. Attack behavior may become less predictable

Many defensive mechanisms still benefit from recognizable patterns, repeated techniques and known indicators.

AI can make it easier to generate and modify attack paths, payloads and social-engineering content at scale.

The question is whether detection systems can continue to rely on relatively stable attacker behavior when the cost of producing variation approaches zero.

5. Regulation may operate on a fundamentally slower timescale

Cybersecurity controls, standards and regulation typically evolve over months or years.

If offensive AI capabilities evolve continuously, there may be a growing gap between the speed at which the threat environment changes and the speed at which organizations and regulators can formally adapt.

6. What happens to digital trust?

This is the part I find most interesting.

As AI becomes better at reproducing text, voice, images and increasingly convincing human behavior, some digital signals that have traditionally helped establish trust may become less reliable.

This raises a broader question:

If both attacks and defensive responses become increasingly autonomous, what forms of evidence remain reliable enough to establish that a critical digital action actually originated from the intended human actor?

The broader question

AI may not simply make existing attacks faster.

It may reduce the amount of time available for human decision-making itself.

If that happens, cybersecurity may increasingly become a competition between autonomous offensive and defensive systems — while raising a more fundamental question about what evidence can still be trusted when the digital environment itself becomes highly automated.

Curious how practitioners here see this. Are we actually approaching a point where human response time becomes an architectural constraint in cybersecurity, or is this overstated?