One operator ran 5,317 AI-executed commands across 34 sessions to breach nine Mexican government agencies.

Check Point's AI Security Report 2026 documents AI crossing from assistant to operator inside live intrusions. The attacker chained two commercial tools: Claude Code for intrusion and network exploration, GPT-4.1 for analyzing stolen data and tasking follow-on work. Separately, detections of long malicious payloads rose roughly fivefold between March and May 2026, approaching 1% of observed prompts. That's the signature of indirect prompt injection hiding in content agentic workflows ingest by design.