Eleven Victims in Twenty-Six Seconds
An AI-agent campaign hit 395 organisations in 48 countries, with eleven compromised in under half a minute — the threat model has moved from demonstration to runbook.
5 October 2026 — The number to hold onto this week is twenty-six seconds. That is how long it took a mass AI-agent campaign to compromise eleven victims, out of 395 organisations targeted across 48 countries.
GreyNoise documented the campaign against PaperCut print-management servers. Unit 42 separately published an account of an AI-led enterprise intrusion that completed in under ten hours, using over fifty distinct techniques. Spain's data protection authority published the first formal notification of an agentic data breach.
Three separate sources, one conclusion: the agentic threat model has stopped being a demonstration and become a runbook. Somebody has written down the procedure, and it works.
The contrast with how most organisations defend is stark. Security review cycles run weekly or monthly. Reconnaissance, initial access and lateral movement now run in seconds. A control that requires a person to notice something and act on it is not a control against this class of attack; it is a post-incident record.
It was also a heavy model-release week, and the pattern there is instructive. Gemini 4 Argon shipped gated rather than open, and GPT-6.1 Astra was cancelled outright on safety grounds. Two of the largest labs chose to withhold capability they had built. Whatever one makes of the specific decisions, the direction is unmistakable: the frontier is being released more cautiously than it is being adopted.
Which brings up the SME numbers. Eighty-nine percent of small businesses report positive sentiment about AI. Eighty-nine percent cannot prove return on investment. Those are the same number, and that symmetry is the problem — enthusiasm without measurement is not evidence of value, it is evidence of enthusiasm.
What this means if you run an SME. Patch the boring things. PaperCut is print software; the organisations hit were not chosen for being adventurous. The unglamorous estate is where the door usually is.
And if you are one of the 89% who cannot prove ROI, pick one process this quarter and put a number on it before you automate and after. One measured process is worth more than ten unmeasured ones.
Eighteenth in a weekly series on the developments that matter to small and mid-sized organisations.