Hackers Use DeepSeek and GLM AI Agents to Breach 10 Organizations in Autonomous Cyberattacks

Chinese-speaking threat actors combined open-source penetration testing tools with large language model AI agents (DeepSeek and Zhipu GLM) to autonomously plan, execute, and complete intrusions across 10 organizations — including targets in semiconductor manufacturing and U.S. defense policy — with little human oversight. The root issue is that defenders have not yet adapted detection and response capabilities to the speed and scale at which AI-driven attacks can operate, leaving traditional alert thresholds and analyst-paced triage dangerously inadequate. When an attacker can delegate reconnaissance, exploitation, and lateral movement to an autonomous agent, the window between initial access and deep compromise shrinks dramatically. This matters because high-value sectors like defense and semiconductors face nation-state-grade adversaries who now have a scalable, low-cost force multiplier that outpaces conventional security operations.