{
  "schema_version": "1.0",
  "publisher": "AI Release",
  "article": {
    "title": "AI Agent Went from a Plugin to a Top Manager's Disk: Defense Caught 14 of 15 Steps",
    "canonical_url": "https://ai-release.org/posts/ii-agent-proshel-ot-plagina-do-diska-top-menedzhera-zaschita-poymala-1-2df8911c_en.html",
    "language": "en",
    "article_type": "news",
    "published_at": "2026-11-12T00:00:00+00:00",
    "updated_at": "2026-11-12T00:00:00+00:00"
  },
  "summary": "Positive Technologies ran a RedTeam AI agent through a corporate network: it went from a vulnerable plugin on a web server all the way to a top manager's disk. A comprehensive ML/AI defense built on MaxPatrol SIEM caught 14 of 15 steps — without rules written for specific tools.",
  "topics": [
    "AI agents",
    "cybersecurity",
    "SIEM",
    "RedTeam",
    "AI",
    "Agents",
    "PromptInjection",
    "AI"
  ],
  "entities": [
    {
      "id": "E-SRC",
      "name": "habr.com",
      "type": "source",
      "description": "source domain",
      "url": "https://habr.com/ru/companies/pt/articles/1099820/"
    },
    {
      "id": "E-T1",
      "name": "AI agents",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T2",
      "name": "cybersecurity",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T3",
      "name": "SIEM",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T4",
      "name": "RedTeam",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T5",
      "name": "AI",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T6",
      "name": "Agents",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T7",
      "name": "PromptInjection",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-T8",
      "name": "AI",
      "type": "topic",
      "description": "publication tag",
      "url": null
    },
    {
      "id": "E-AIR",
      "name": "AI Release",
      "type": "publisher",
      "description": "published the article",
      "url": "https://ai-release.org/"
    }
  ],
  "claims": [
    {
      "id": "AR-IIAGENTPRO-001",
      "statement": "Positive Technologies ran a RedTeam AI agent through a corporate network: it went from a vulnerable plugin on a web server all the way to a top manager's disk.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-001",
      "evidence_excerpt": "Positive Technologies ran a RedTeam AI agent through a corporate network: it went from a vulnerable plugin on a web server all the way to a top manager's disk."
    },
    {
      "id": "AR-IIAGENTPRO-002",
      "statement": "A comprehensive ML/AI defense built on MaxPatrol SIEM caught 14 of 15 steps — without rules written for specific tools.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-002",
      "evidence_excerpt": "A comprehensive ML/AI defense built on MaxPatrol SIEM caught 14 of 15 steps — without rules written for specific tools."
    },
    {
      "id": "AR-IIAGENTPRO-003",
      "statement": "The author of the test himself warns: one scenario, one lab — the conclusions don't hold beyond it.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-003",
      "evidence_excerpt": "The author of the test himself warns: one scenario, one lab — the conclusions don't hold beyond it."
    },
    {
      "id": "AR-IIAGENTPRO-004",
      "statement": "PT ESC lead expert Alexey Potapov described the experiment in a lab setting.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-004",
      "evidence_excerpt": "PT ESC lead expert Alexey Potapov described the experiment in a lab setting."
    },
    {
      "id": "AR-IIAGENTPRO-005",
      "statement": "The RedTeam AI agent was given a task: reach the documents of a top manager at a small company via the corporate network.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-005",
      "evidence_excerpt": "The RedTeam AI agent was given a task: reach the documents of a top manager at a small company via the corporate network."
    },
    {
      "id": "AR-IIAGENTPRO-006",
      "statement": "The route: a vulnerable plugin on a web server, then a mail server, a domain controller, and the executive's host.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-006",
      "evidence_excerpt": "The route: a vulnerable plugin on a web server, then a mail server, a domain controller, and the executive's host."
    },
    {
      "id": "AR-IIAGENTPRO-007",
      "statement": "At the final step, the agent viewed the contents of the disk.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-007",
      "evidence_excerpt": "At the final step, the agent viewed the contents of the disk."
    },
    {
      "id": "AR-IIAGENTPRO-008",
      "statement": "The entire path took several hours, proceeded with operator hints, and on the three compromised servers the agent set up tunnels and moved onward through them.",
      "claim_type": "reported_fact",
      "confidence": "not_assessed",
      "source_type": "publication source",
      "verification_status": "reported_unverified",
      "source_url": "https://habr.com/ru/companies/pt/articles/1099820/",
      "article_anchor": "#ai-claim-008",
      "evidence_excerpt": "The entire path took several hours, proceeded with operator hints, and on the three compromised servers the agent set up tunnels and moved onward through them."
    }
  ],
  "relationships": [
    {
      "subject": "habr.com",
      "predicate": "reports on",
      "object": "AI Agent Went from a Plugin to a Top Manager's Disk: Defense Caught 14 of 15 Steps",
      "claim_id": "AR-IIAGENTPRO-001"
    },
    {
      "subject": "AI Release",
      "predicate": "publishes",
      "object": "AI Agent Went from a Plugin to a Top Manager's Disk: Defense Caught 14 of 15 Steps",
      "claim_id": "AR-IIAGENTPRO-001"
    }
  ],
  "questions_and_answers": [
    {
      "question": "What is this article about?",
      "answer": "AI Agent Went from a Plugin to a Top Manager's Disk: Defense Caught 14 of 15 Steps. Positive Technologies ran a RedTeam AI agent through a corporate network: it went from a vulnerable plugin on a web server all the way to a top manager's disk.",
      "claim_ids": [
        "AR-IIAGENTPRO-001"
      ],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "What happened?",
      "answer": "Positive Technologies ran a RedTeam AI agent through a corporate network: it went from a vulnerable plugin on a web server all the way to a top manager's disk. A comprehensive ML/AI defense built on MaxPatrol SIEM caught 14 of 15 steps — without rules written for specific tools. The author of the test himself warns: one scenario, one lab — the conclusions don't hold beyond it.",
      "claim_ids": [
        "AR-IIAGENTPRO-001",
        "AR-IIAGENTPRO-002",
        "AR-IIAGENTPRO-003"
      ],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "Who is the source?",
      "answer": "habr.com: https://habr.com/ru/companies/pt/articles/1099820/",
      "claim_ids": [],
      "article_anchor": "#ai-knowledge"
    },
    {
      "question": "What remains unknown?",
      "answer": "The article reports the cited source; independent verification and full details are not provided.",
      "claim_ids": [],
      "article_anchor": "#ai-knowledge"
    }
  ],
  "limitations": [
    "No independent verification is provided.",
    "Full details, dates and official documents may be missing.",
    "The article reports a source rather than being the primary source."
  ],
  "citation": {
    "preferred_citation": "AI Release. «AI Agent Went from a Plugin to a Top Manager's Disk: Defense Caught 14 of 15 Steps». 2026-11-12. https://ai-release.org/posts/ii-agent-proshel-ot-plagina-do-diska-top-menedzhera-zaschita-poymala-1-2df8911c_en.html",
    "canonical_url": "https://ai-release.org/posts/ii-agent-proshel-ot-plagina-do-diska-top-menedzhera-zaschita-poymala-1-2df8911c_en.html",
    "publisher": "AI Release"
  }
}