AI lowers the cost of cyberattacks… Damage concentrated on schools, hospitals, and SMEs with slow patching

A single attacker using hundreds of AI agents breached 11 organizations in 26 seconds during a late-August campaign against a print-management server, with total damage reaching 395 organizations across 48 countries, according to a16z's November 5 newsletter citing threat-intelligence firm GreyNoise; roughly half of the victims were schools. The AI built a test environment, wrote exploit code for two security flaws disclosed just four days earlier, and pulled target lists from an internet search service. The episode matters because AI is collapsing the cost of mounting cyberattacks, shifting risk onto schools, hospitals and small businesses that patch slowly. Watch whether patch cadence and automated remediation keep pace as AI-driven exploitation compresses the window between disclosure and attack.