When an LLM Agent Steps in After RCE, the Real Breach Starts Fast

A marimo compromise linked to a database exfiltration shows how AI-assisted post-exploitation can compress attacker timelines once a foothold exists.