![](\"https:\/\/cdn.pblzr.de\/dacbb27c-1270-4041-b681-e2b95f06f8a1\/2026\/10\/adesso-logo-400x300_TEXT.jpg\"){kind=logo}
<\/p>\n<\/p>\n
The attack patterns aren\u2019t new. What\u2019s new is the speed. AI is changing the economics of attacks: What used to require specialized knowledge and take weeks now runs automatically in minutes\u2014so beginner-friendly that you no longer need advanced skills. This creates a dangerous asymmetry. With AI, attackers find vulnerabilities at breakneck speed, including zero-day vulnerabilities without patches. According to the BSI, it takes an average of 73 days for a patch to become available\u2014any organization that holds a \u201cpatch day\u201d every 14 days is structurally too slow. And the attacker needs only one open door; they automate tens of thousands of attempts per hour.<\/p>\n
The problem often runs deeper: Many organizations lack the basics\u2014a clear picture of their own applications and processes. I like to compare security to a house: The best front door is useless if the back door is open or the key is hidden under the doormat. Security only works holistically\u2014the chain is only as strong as its weakest link.<\/p>\n
The debate over digital sovereignty often revolves around server locations. But the core issue is something else: having the ability to act\u2014and you can only do that if you\u2019re prepared. It starts with two steps. First, transparency: Where do I stand, and where are my biggest gaps? Second, prioritization: Because resources are limited, I focus on what\u2019s critical\u2014specifically the areas where an attacker could exploit a chain of vulnerabilities. The good news: AI also helps the defender find these critical points faster.<\/p>\n
This is exactly where AttackAI comes in. If attackers use AI as a weapon, we must harness the same efficiency for our own attacks. We\u2019ve equipped our Red Team to launch targeted attacks on systems, infrastructure, and data centers using AI models\u2014with the same, or in some cases better, resources than the attackers. This doesn\u2019t guarantee security yet, but it provides an honest snapshot: Where are the doors and windows left open? This serves as a roadmap for defense.<\/p>\n
As a trained software developer, I know that vulnerabilities often originate directly in the source code. That\u2019s why our preferred approach is white-box testing, including source code analysis. The Hugging Face incident is instructive in this regard: The models managed to execute code even without access to the source code. If an attacker can achieve this from the outside\u2014how much more thorough can we be if we consciously examine our own code first?<\/p>\n
And yes: What went wrong in these evaluations is, at its core, our own doing. That\u2019s exactly why we take this risk very seriously. The difference between a test run gone wrong and responsible offensive security lies not in the tool, but in the control over it.<\/p>\n
What happened there\u2014an AI exceeding its limits, affecting unrelated real-world systems, or spreading malware\u2014is ruled out in an AttackAI operation thanks to our approach. We attack only contractually authorized, clearly defined customer systems; there is no such thing as a fictional target that accidentally becomes real. Humans are in control, the agents carry out the tasks\u2014we monitor the attacks instead of letting them run unsupervised. We operate in a highly regulated environment; the results are documented in a controlled report. And data protection, especially for critical infrastructure and the healthcare sector: A real attacker doesn\u2019t care about it, but we do\u2014confidential information never leaves your own network and is stored on specially protected hardware.<\/p>\n
With AI, we\u2019ve entered a new generation of cybersecurity. Attacks will increase dramatically\u2014becoming easier for novices to carry out while also being more efficient than ever before. This isn\u2019t an issue where you can bury your head in the sand; you must act now, while we\u2019re still taking proactive steps rather than merely reacting. However: AttackAI offers an initial, sharp insight, not the complete solution. Nothing can replace a comprehensive security infrastructure, including pre-planned emergency playbooks.<\/p>\n
Don\u2019t take AI-powered attacks lightly. The right approach is to think like the attacker before the attacker does\u2014and to remain capable of taking action. That\u2019s exactly why we built AttackAI.<\/p>\n
OpenAI & Hugging Face on the incident (July 21, 2026): openai.com\/de-DE\/index\/hugging-face-model-evaluation-security-incident
heise online on the OpenAI\/Hugging Face announcement: heise.de\/news\/KI-Modelle-von-OpenAI-haben-Cyberangriff-auf-Hugging-Face-autonom-ausgefuehrt-11372797.html
Anthropic on three incidents in cybersecurity evaluations: anthropic.com \u2013 \u201cInvestigating three real-world incidents in our cybersecurity evaluations\u201d
tagesschau.de on the Anthropic incident: tagesschau.de\/wirtschaft\/digitales\/anthropic-ki-angriff-unternehmen-100.html<\/p>\n
– – – – –<\/p>\n