How has the speed of cyber threats changed with AI agents?

Adversary breakout time has significantly decreased, with the fastest recorded instances now at 27 seconds and an average of 29 minutes, down from 48 minutes in 2024.

What challenges do AI agents present for security teams?

AI agents' activity often looks identical to human actions in security logs, and enterprises struggle with visibility into which agents are running, their permissions, and accountability.

Are AI agent ecosystems vulnerable to attacks?

Yes, AI agent ecosystems are increasingly targeted by supply chain attacks, such as ClawHavoc, which embed malicious skills and backdoors into platforms like ClawHub.

Home / Technology / AI Agents Outpace Defenders: Security Clock Ticking

AI Agents Outpace Defenders: Security Clock Ticking

1 Apr

•

Summary

Adversary breakout time has dropped to 27 seconds.
AI agents are difficult to distinguish from human activity.
AI agent ecosystems are increasingly targeted by supply chain attacks.

AI Agents Outpace Defenders: Security Clock Ticking

The cybersecurity landscape is rapidly evolving with the advent of AI agents, drastically reducing the time defenders have to react to threats. CrowdStrike CEO George Kurtz reported that adversary breakout time has plummeted to an average of 29 minutes, down from 48 minutes in 2024, with the fastest recorded time now at just 27 seconds. This acceleration is partly due to the sheer volume of AI applications and their detection events overwhelming traditional security workflows.

Adding to the complexity, AI agent activity often appears indistinguishable from human actions in security logs, making it challenging for security teams to monitor and control. Cisco's research indicates that while many enterprises are piloting AI agents, few have moved them into production due to these fundamental visibility and accountability gaps. The rise of AI agent ecosystems also presents new attack vectors, with supply chain attacks like ClawHavoc targeting these platforms, embedding malicious skills and backdoors.