What took an operator weeks, agents now do in hours. The goal and the path are unchanged: attackers still have to authenticate, pivot, and exfiltrate. The question for CISOs is whether those steps are visible at AI speed.