🚨 Talos Catches Agentic AI Inside Real Intrusions: Damien Lewke on Why Hunt First Beats Alert Triage
Cisco Talos documented a Chinese-speaking threat actor using agentic AI across reconnaissance, exploitation, and persistence the same week CISA issued 72-hour patch deadlines for Oracle WebLogic and Gitea flaws under active attack. Damien Lewke, founder and CEO of Nebulock, argues the defensive answer is a hunt-first methodology: continuous, AI-assisted threat hunting over endpoint, identity, and cloud telemetry instead of alert triage. This edition covers machine-speed exploitation, MFA bypass at scale, shadow AI hunting, and how to detect AI agents by their behavioral tempo.
