Unit 42 warns AI has shifted balance of power from defenders to attackers

Ah, marvellous. Palo Alto Networks' threat intelligence team, Unit 42, has looked at the agentic AI revolution and concluded that the 'balance of power' has shifted from defenders to attackers. The early waves of threats, they say, have 'broken in the wild,' which is a bit like discovering the tiger has escaped and announcing that it is now at large in the garden. This is the same cheerful trajectory the 100-company letter warned us about, except now the diagnosis comes with a specific timeline: the same capabilities will be in the hands of attackers within a year. A year. Not a decade, not a review process, not a 'multi-stakeholder framework.' A year.

You have to admire the efficiency. Readily available agentic AI models, the sort of thing any script kiddie can rent by the token, already demonstrate enough capability to flip the defensive advantage. Unit 42's estimate that attackers get the full suite within twelve months is presumably the optimistic scenario; pessimists might note that 'within a year' can mean 'already, but we need to justify our budget cycle.' Meanwhile, the vendors who shipped these models into the wild have moved on to the next frontier, leaving security teams to explain to their CISOs that the company's own models are now part of the attack surface.

So yes, the balance of power has shifted. Defenders get firewalls and threat intel reports; attackers get the full power of agentic AI, delivered with the same panache as a streaming subscription. Unit 42's warning is probably the most honest thing we'll hear all year, which is precisely why it will be filed, forwarded to a committee, and politely ignored until the first truly spectacular breach lands. But don't worry — the capabilities will be here within a year, as promised.