AI Hacking Speeds Attacks, Overloads Responders

Palo Alto Networks' CEO says open-source AI is lowering the barrier to hacking, with attacks rising in volume and speed.

Updated on Nov. 2, 2026 in Cybersecurity

Vector editorial illustration of stacked unlabeled server modules, one chassis open to a bare circuit board and coiled cable, in slate, teal, and coral. — Palo Alto Networks CEO Nikesh Arora warned that open-source AI is lowering the barrier to hacking, accelerating attacks as responders scramble to patch critical PHP vulnerabilities. AI Illustration. Upload story photo >

Live Poll

Do you feel your online accounts are less safe because of AI-powered hacking?

Nikesh Arora, CEO of Palo Alto Networks, warned that cyberattacks will accelerate rapidly, months after first sounding the alarm about widely available AI-powered hacking capabilities. The warning came as responders scrambled to patch critical vulnerabilities found in PHP days before. The development is an observed trend and executive warning, not a new product, so it is research-level commentary rather than a shipped capability.

Why it matters

The increase in hacking activity is attributed to more people becoming capable of attacking as the barrier to entry falls, with open-source LLMs making attack path discovery trivial. Arora's warning points to volume, speed, and automation, not new sophistication, as the driver behind the current spike.

The evidence is an executive assessment rather than a measured dataset, with no attack counts or rate comparisons provided. The source states attacks are not becoming more sophisticated but are occurring faster and by more people, and it does not specify how the acceleration is measured.

The players

Palo Alto Networks

A cybersecurity firm valued at $300 billion, whose CEO Nikesh Arora has been warning about AI-powered hacking.

Nikesh Arora

CEO of Palo Alto Networks, who first sounded the alarm about widely available AI-powered hacking capabilities six months earlier.

The details

Attacks are being carried out through a critical vulnerability, a social engineering attack (manipulating people rather than systems), or by daisy chaining publicly available vulnerabilities, meaning linking several known flaws so each one opens access to the next. PHP, a widely used open-source scripting language that powers websites and web applications, was the subject of critical vulnerabilities that responders patched days before the warning. Supply chain vendors with infrastructure access can also serve as attack paths into target systems.

Six months before November 2, 2026: Arora first warned about widely available AI-powered hacking capabilities.
Days before November 2, 2026: Responders scrambled to patch critical PHP vulnerabilities.

The Tech Race

The warning places Palo Alto Networks, a firm valued at $300 billion, in the position of a major defender sounding the alarm about AI-assisted attacks. The source does not name a competing effort or product roadmap for comparison.

Incident response teams are expected to be busier as AI-powered hacking capabilities become widely available, which may affect how quickly organizations can respond to intrusions. The source does not provide timelines for when these capabilities will reach individual users or businesses.

The takeaway

Watch whether attack volume and speed rise as Arora predicts, since the source frames the change as one of automation and scale rather than new techniques. Track future patching cycles for PHP and other widely used open-source software to see whether vulnerability disclosures and exploitation keep pace.