AI Threat · Whitepaper

Chapter 18 · Humans Wielding Machines

Cyber Offence at Machine Speed

Key insights from Chapter 18 of "AI Threat"

Author Conceived and directed by Gunnar Nordqvist; text written by AI agents under his direction.
Published 2 November 2026
Build number 2026.11
ai-risk loss-of-control ai-misuse threat-register
Figure 18.1: The time from disclosure to exploitation fell from weeks to less than zero between 2018 and 2025; AI has been observed to accelerate it, and the defender answers with patch velocity and detection at machine speed.
Figure 18.1: The time from disclosure to exploitation fell from weeks to less than zero between 2018 and 2025; AI has been observed to accelerate it, and the defender answers with patch velocity and detection at machine speed.

Part IV turns from what AI does to minds and societies to what people do with it. At this scale nothing escapes anyone's control: the machine obeys, and the harm comes from the people it obeys. Cyber offence is where the evidence is strongest. Two years of reports describe a movement from AI as a research assistant to AI running large parts of real intrusions, while the time from disclosure of a vulnerability to its exploitation has collapsed to less than nothing.

The chapter tests T6 The weapon in human hands, the trope of the machine as an instrument of war, terror and crime, in the domain where it can be tested best. It answers the series' open question Q7 on patch-to-exploit times measured in minutes as far as the evidence allows, and takes a first step on Q4, what machine-speed adversaries mean beyond security operations. It keeps the boundary set in Chapter 1 and in AI Red Team, Chapter 1 (F28): adversary behaviour is described at the level of what reports observed and what it means for defence, never as techniques, tools, prompts or steps (180, Nordqvist, 2026). It builds on AI Platform and Security, Chapter 18, which documented the same evidence for platform architects and set out four commitments against AI-enabled adversaries (F18, F19) (179, Nordqvist, 2026).

Table 18.1: The window and where AI has been observed to accelerate it.

Primary topics explored

  1. From misuse to orchestration
  2. Agentic offensive frameworks
  3. The exploitation window
  4. The defender's mirror
  5. Change of degree or of kind
  6. What Europe and the series have already settled

About AI Threat

AI Threat is Book 5 of The Transformed Architecture. It investigates whether the dystopias of science fiction, with AI as the threat, are coming true. It covers every scale of the threat, from the human mind and society to misuse, machines beyond control and the end of the world, stages every debate constructively, and turns the verdict into what individuals, European enterprises and public authorities can do.

It builds on the conclusions of Architecture as Code, AI Governance, AI Platform and Security and AI Red Team.

Who should read this

Boards, chief risk officers, CISOs, AI governance leads, architects and public-sector leaders.

Portrait of Gunnar Nordqvist

Gunnar Nordqvist

Conceived, directed and published the books of The Transformed Architecture.

Continue with the full chapter

Read the full chapter online

Chapter 18: Cyber Offence at Machine Speed in AI Threat gives the detailed explanations, practical examples and implementation patterns behind this summary.

This whitepaper belongs to “Humans Wielding Machines” and is one of 39 drawn from the manuscript.