[benregenspan]

> At the peak of its attack, the AI made thousands of requests, often multiple per second—an attack speed that would have been, for human hackers, simply impossible to match.

This part is pretty hype-y. Old-fashioned deterministic web app vulnerability scanners can of course be used to make multiple requests per second. The limiting factor is probably going to be rate-limiting on the victim's side / # of IP ranges the attacker can cycle through, which would apply to the AI-driven vulnerability scan too.