AI-powered attacks now breach enterprises in 22 seconds, compressing defender response window

According to Mandiant's M-Trends 2026 report, the median time between initial compromise and full exploitation by AI-driven attacks has collapsed to just 22 seconds from more than eight hours in 2022. Security experts discussed the implications during Black Hat USA, noting defenders face a growing capability gap and cannot simply hire faster. Organizations must adopt new staffing models including AI penetration testers and governance specialists to manage autonomous agent risks. Effective defense requires balancing human oversight with autonomous systems rather than attempting to match attacker speed with human-only teams.