China-Nexus VAPOR PANDA Group Used AI Agents to Breach Enterprise Targets at Scale

A threat intelligence report has detailed how VAPOR PANDA, a China-linked advanced persistent threat group, deployed AI agents to automate reconnaissance, vulnerability identification, and initial access across more than 200 targeted organizations, successfully breaching nine of them. The AI agent pipeline reportedly automated tasks that previously required significant human operator time, compressing the attack cycle and enabling simultaneous multi-target campaigns. This is one of the most concrete documented cases of adversarial AI agent use in a nation-state context, and it has immediate implications for enterprise security teams evaluating their attack surface. Developers building agentic systems need to understand that the same autonomous task-execution capabilities powering legitimate use cases are now being weaponized at operational scale. Security architects should treat AI-assisted adversarial automation as a baseline assumption rather than a future threat.