CyberStrikeAI Yaponiyadagi nishonlarga qarshi xakerlik operatsiyalarini avtomatlashtirish uchun 44 ta sun'iy intellekt agentidan foydalanadi

Kiberxavfsizlik tadqiqotchilari sun'iy intellekt (SI) asosiy element bo'lgan yoki inson operatoriga yordam bergan uchta kiberhujum haqida ma'lumot e'lon qildi. Bu hujumlar Yaponiyadagi tashkilotlarga qaratilgan edi.

TrendAI uchta ochiq server muhitini tahlil qildi, ular tahdid aktorlari tomonidan zararli kiberoperatsiyalarni o'tkazish uchun ishlatilgan. Tadqiqotchilar bu hujumlarni avvalgi e'lon qilingan hujumlardan farqli deb ta'rifladilar. Avvalgi hujumlarda ARTEX — avtonom SI penetratsion testlash tizimi — Janubiy Koreya va Yaponiyadagi tashkilotlarga qarshi ishlatilgan edi.

"Bu muhitlarda razvedka va hujum vositalari, skriptlar, nishon ro'yxatlari, natijalar, jurnallar va buyruq tarixi saqlangan edi," deb aytishdi xavfsizlik tadqiqotchilari Bakuei Matsukawa va Joseph C Chen. "Ular malakali operatorlar tomonidan qo'lda ishlatilgan ish joylaridan tortib, butun ish jarayonini, shu jumladan buyruq va nazoratni avtomatlashtirgan SI-agent platformalarigacha turlicha edi."

Uchta hujumning birinchisi CyberStrikeAI dan foydalanishni o'z ichiga oladi. Bu ochiq manbali penetratsion testlash vositasi avval Fortinet FortiGate qurilmalariga qarshi hujum kampaniyasida ishlatilgan. Faoliyat 2026-yil oktyabr oyida qisqa muddatda jamlangan.

SI asosidagi faoliyat hujum hayot siklining turli jihatlarini takrorlanadigan ish jarayoniga avtomatlashtirish uchun ushbu hujum vositasidan foydalanadi. Bu jarayon razvedka va zaiflikni aniqlash, tekshirish va ekspluatatsiyadan tortib, buyruq va nazorat (C2), doimiylik, ma'lumotlarni o'g'irlash va avtomatlashtirilgan hisobot berishgacha qamrab oladi.

Bu ish 44 ta agent o'rtasida taqsimlanadi, ular hujumning turli jihatlarini boshqaradi. Shuningdek, yapon tilida shakllar va soxta kirish sahifalarini yaratish imkonini beradi.

"Qisqa muddat ichida kamida 19 ta aniqlanadigan tashkilot, shu jumladan kamida 16 tasi Yaponiyada, tekshirish faoliyatiga duchor bo'ldi," deb aytdi Trend Micro korporativ xavfsizlik bo'limi. "Har birida bir xil formatdagi hisobot va dalillar indeksi mavjud edi. Bular operator tomonidan qoldirilgan tasodifiy eslatmalar emas, balki platforma tomonidan bajarilgan tuzilgan jarayon natijalari edi."

Ikkinchi holat inson tomonidan boshqarilgan hujum sifatida tavsiflanadi, bunda katta til modeli (LLM) rejalashtirish va vositalarni ishlab chiqishni tezlashtirishga yordam bergan. Infratuzilma va artefaktlar tahlili shuni ko'rsatadiki, bu kampaniya ham SI ish jarayoni platformalari va inferensiya xizmatlarini nishonga olishga mo'ljallangan, maqsad — katta miqdordagi inferensiya quvvatini arzon narxda olish.

Hujumlardan biri standart ma'lumotlar bilan ochiq bo'lgan geografik axborot tizimi (GIS) serveriga qaratilgan. Natijada kadastr va tijorat yozuvlari, Windows ma'lumotlari va elektron pochta ma'lumotlari o'g'irlangan. Butun kampaniya 2026-yil avgust va sentyabr oylarida 24 kun davom etgan.

Uchinchi holatda SI roli faqat operatorning vositalari va skriptlarini ishlab chiqish bilan cheklangan. Bu texnologiyaning Cisco, Citrix, F5 va Yamaha qurilmalariga qaratilgan, nashr etilgan zaifliklar, boshqaruv funksiyalari yoki konfiguratsiya fayllarida mavjud ma'lumotlardan foydalanadigan kampaniyalarda cheklangan rol o'ynaganini ko'rsatadi.

Tahdid aktori 2026-yil yanvardan oktyabrgacha kamida oltita kampaniya o'tkazgan, ochiq VPN qurilmalari va WebLogic serverlariga tasodifiy hujum qilgan. "Operator tajribali bo'lib, avtomatlashtirish va dalillarni boshqarish bo'yicha o'rnatilgan amaliyotlarga ega edi," deb aytishdi tadqiqotchilar.

Hozircha bu uchta hodisa bir operator bilan bog'liq ekanligini ko'rsatadigan dalil yo'q. Shuningdek, hujumlar boshqa mintaqalarga qaratilganmi va hujumlarni amalga oshirish uchun qaysi SI modellari ishlatilgani ham noma'lum.

Shunga qaramay, bu tahdid aktorlarining hujumlari faqat Yaponiya va Janubiy Koreya kabi qo'shni davlatlar bilan cheklanmagan. Birinchi holat operatori Tayvan va Gonkongdagi tashkilotlarga ham hujum qilgan, uchinchi holatda esa Buyuk Britaniya, Fransiya, Italiya, Qatar va Kolumbiyadagi tashkilotlar WebLogic kashfiyot ro'yxatlarida bo'lgan.

"SI hujumchilarning ish kuchini oshirdi, lekin ish hali ham ochiq eshiklarni qidirishdan iborat," deb aytdi TrendAI. "Eshik turlari va ularni ochiq qoldiradigan zaifliklar o'zgarmagan. O'zgargan narsa — bir vaqtning o'zida minglab eshikni sinab ko'rish, nishon mamlakat tiliga moslashish va charchoqsiz davom etish qobiliyati."

Bu rivojlanish turli motivatsiyaga ega tahdid aktorlarining agentik SI ni mavjud hujum xavfsizlik ish jarayonlariga integratsiya qilgan ko'plab kampaniyalar bilan bir vaqtda sodir bo'ldi. Bu ularga tadqiqot, zararli dastur ishlab chiqish, ijtimoiy muhandislik va hujumning boshqa qismlarini tezlashtirish imkonini berdi.

Vaziyatni yanada yomonlashtiradigan narsa shuki, SI razvedkani tezlashtirish, qaror qabul qilishni avtomatlashtirish va ijtimoiy muhandislikni sanoatlashtirish uchun tobora ko'proq ishlatilmoqda, bu esa xavfsizlik zaifliklarining ochilishi va ekspluatatsiyasi o'rtasidagi vaqtni qisqartirmoqda. Microsoftning 2026-yilgi Raqamli Mudofaa Hisobotiga ko'ra, SI zaiflikni aniqlashdan qurollanishgacha bo'lgan median vaqtni 24 soatdan ancha pastga tushirgan.

Yomon niyatli aktorlar tomonidan SI qabul qilinishi zaifliklarni aniqlash va ekspluatatsiya qilish uchun zarur bo'lgan vaqt, tajriba va xarajatni kamaytirmoqda, shu bilan birga hujumchilar va himoyachilarga tezlik, miqyos va avtonomlik bilan ishlash imkonini bermoqda, deb qo'shdi Windows ishlab chiqaruvchisi.

"Asosiy masala shunchaki aktor chegaraviy SI ga ega yoki yo'qligi emas," deb aytdi Trend Micro. "Qobiliyatli modellarga kirish allaqachon sezilarli operatsion yutuqlarni keltirishi mumkin. Biroq ekotizim chuqurligi bu qobiliyatlarni qanchalik ishonchli, mustaqil va qaysi miqyosda barqaror saqlash mumkinligini belgilaydi."

"SI endi APT guruhlari uchun eksperimental qobiliyat emas; u bevosita kampaniyalarga o'rnatilgan operatsion komponentdir."

Tahdid aktorlarining SI vositalariga bo'lgan o'sib borayotgan talabi yangi monetizatsiya yo'lini ochdi. Bu yo'l o'g'irlangan SI provayder sessiya tokenlari va hujum SI vositalari — APEX AI, MessiahGPT va DarkGPT — ni sotadi, bu esa kiberjinoyatni yanada tovarlashtirmoqda va ilg'or, doimiy va yashirin hujumlarni amalga oshirish uchun kirish to'sig'ini pasaytirmoqda.

O'tgan hafta Microsoft Xitoy davlatiga bog'liq tahdid aktori ConnectWise bulut zaxira ilovasini buzib kirganini va ARTEX dan foydalanib 2 250 dan ortiq Microsoft 365 ijarachilariga kirganini e'lon qildi. Bu faoliyat Storm-0940 ga bog'langan, Microsoft aytishicha, bu guruh 2026-yil sentyabridan beri yuzlab tashkilotlarga qarshi parol purkash hujumlarini avtomatlashtirish uchun ushbu tizimdan foydalangan.

"Ko'pchilik nishonlar muvaffaqiyatsiz bo'lsa-da, Storm-0940 qisqa muddat ichida ko'plab tashkilotlarda imtiyozli bulut doimiyligini qo'lga kiritdi," deb aytdi Microsoft. "Storm-0940 faoliyati keng nishon to'plamiga ega tahdid aktori agentik SI vositasi va imtiyozli autentifikatsiya materialidan foydalanib, ko'plab tashkilotlarni tezda buzib kirishga urinishini ko'rsatadi."

Janubiy Koreyadan kelgan mahalliy ommaviy axborot vositalari xabarlariga ko'ra, rasmiylar mamlakatdagi 90 dan ortiq tashkilotga kirib borgan kiberjinoyat operatsiyasi bilan bog'liq yetti nafar gumondorni aniqlagan. Ularning aksariyati ARTEX bilan bog'liq. Faoliyat ortida turgan 32 yoshli asosiy shaxs 2019-2022-yillar orasida kiberxavfsizlik kompaniyasida ishlagan va penetratsion testlash bo'yicha tajriba orttirgan.

38 ta hodisada tahdid aktorlar o'g'irlangan ma'lumotlarni oshkor qilmaslik evaziga 360 million von (270 000 dollar) to'lov talab qilgan. Buzilgan tashkilotlardan 8,2 milliondan ortiq yozuv o'g'irlangan deb hisoblanmoqda.

So'nggi haftalarda hujjatlashtirilgan boshqa SI yo'naltirilgan kampaniyalar quyidagilar:

• BUGSTER nomi bilan ishlaydigan moliyaviy motivatsiyaga ega tahdid aktori Hermes Agent tizimini DeepSeek V4 ni fikrlash dvigateli va Cursor ni ikkinchi vosita sifatida (ikkalasi ham xavfsizlik nazoratlari o'chirilgan holda) sozlagan. U Hindiston universiteti veb-saytiga qarshi WordPress brut-forse kampaniyasini o'tkazgan va REST API tekshirish hisobotini yaratgan.
• Hujumchi ikkinchi Hindiston davlat universitetiga ham kirib, 5 200 dan ortiq yozuvni, shu jumladan talabalarning shaxsiy ma'lumotlarini (PII) o'z ichiga olgan ma'lumotlar bazasini o'g'irlagan. Uchinchi hujum mashhur elektron tijorat platformasidagi Hindiston saytini tekshirib, do'kon API tokeni, administrator elektron pochta manzillari, telefon raqamlari va to'lov savdogar identifikatorlarini olishga muvaffaq bo'lgan.
• "Aktiv shuningdek, VoIP firibgarlik tajribasini suhbat orqali olish uchun maxsus SI bot profillarini yaratgan va Wi-Fi parolini buzish va kriptovalyuta kitlari (ya'ni katta kriptovalyuta egalari) razvedkasi uchun avtomatlashtirilgan quvurlarni saqlagan," deb aytdi Palo Alto Networks Unit 42. "E'tiborga molik jihati shuki, Wi-Fi buzish qobiliyati nishonga yaqin jismoniy yaqinlikni talab qiladi, bu esa aktorning nishon joylarga mahalliy kirish huquqiga ega ekanligini ko'rsatadi."

• CyberCartel nomli elektron jinoyat guruhi CARLIY0S deb nomlangan ko'p agentli tizimdan foydalanib, Lotin Amerikasidagi banklar va to'lov provayderlariga qarshi hujumlarni muvofiqlashtirgan. Tizim to'rtta rolga ixtisoslashgan Claude modellaridan iborat kognitiv to'dani ishlatadi, ular "har bir nishonni muhokama qiladi va bitta hakamga bo'ysunadi", so'ngra asosiy orkestrator harakat qiladi. "Guruh turli tijorat SI modellariga turli rollarni tayinlab, nishonlarni tahlil qilish, hujumlarni ishlab chiqish va operatsiyalarni muvofiqlashtirishni amalga oshirgan," deb aytdi Straiker.

• Tahdid aktorlari ochiq SI nuqtalarini egallab, avtonom hujumlarni o'tkazish uchun mo'ljallangan hujum SI agentini ishlab chiqqan. Ko'rsatmalar unga inson tasdiqlamasiz 100 000 qadamgacha hujum o'tkazish imkonini beradi, ochiq nuqtaning haqiqiy egasi esa inferensiya uchun to'laydi. Tizim Skynet rejimi deb nomlangan zararli tsiklni o'z ichiga oladi, u 74 ta vositadan iborat to'plamdan foydalanib, nishonlarni skanerlash, ularni yuqtirish, kriptovalyuta konchilarini joylashtirish va buzilgan xostlarni qayta yuqtirishni amalga oshiradi.

• The Gentlemen to'lov dasturi operatsiyasining sherigi 2026-yil iyun oyining oxirida kamida oltita tashkilotga kirishda Anthropic Claude Code dan foydalangan. Bu razvedka va ekspluatatsiya buyruqlarini yaratish va bajarish, zararli skriptlar yozish, xavfsizlik devori siyosatlarini o'zgartirish va yuqori qiymatli biznes tizimlarini aniqlashni o'z ichiga oladi.

• Zerofot kodli ma'lumot o'g'irlash operatsiyasi "auto_scan" deb nomlangan skanerni yaratgan, u OpenAI Codex va Claude Code ni integratsiya qilib, internetdagi minglab ochiq xostlardan minglab API kalitlari va tokenlarini yig'gan.

• RAGE deb nomlangan SI tomonidan yaratilgan Python tizimi internetga ochiq xizmatlarni (masalan, Redis, Elasticsearch, Docker, Apache Tomcat, Jenkins, Hadoop YARN, Confluence va Supervisord) skanerlash, zaif o'rnatishlarni ekspluatatsiya qilish, ma'lumotlarni qo'lga kiritish va kriptovalyuta konchilarini joylashtirish uchun ishlatilgan.

• Inson operator chegaraviy SI modellaridan foydalanib, 10 soat davomida korporativ tarmoqni avtonom ravishda buzib kirgan. "Aktiv ochiq veb-xizmatga kirib, tarmoq ichiga tunnel ochgan va ichki mikroxizmatlarni xaritalash uchun avtomatlashtirilgan razvedka agentini joylashtirgan," deb aytdi Unit 42. "Yordamchi agentlar korporativ kod omborlarini tekshirib, qattiq kodlangan tokenlar va xizmat parollarini olishgan." Hujumchi so'ngra asosiy ma'muriy ma'lumotlarni qo'lga kiritgan va korporativ kod ilovasini egallab, bulut kirish kalitlarini o'g'irlagan. O'g'irlangan bulut kalitlari keyin jabrlanuvchining SI nuqtalarini buzilishdan keyingi infratuzilmaga aylantirish uchun ishlatilgan.

• Taxmin qilingan rus tilida so'zlashuvchi kiber aktor SI yordamidagi ish jarayonidan foydalanib, PaperCut NG/MF serverlarini ekspluatatsiya qilgan va yuzlab nusxalarni buzib kirgan. "Kampaniya dastlabki ekspluatatsiyadan tashqari Windows ma'lumotlarini yig'ish, xizmat ma'lumotlarini o'g'irlash, ichki tarmoqda harakatlanish, Metasploit avtomatlashtirish va jabrlanuvchini qadoqlashni o'z ichiga olgan tuzilgan buzilishdan keyingi quvurni qamrab olgan," deb aytdi Hunt.io.

• Xitoy tilida so'zlashuvchi tahdid aktori Deere, SharkNinja va Cummins kabi 100 dan ortiq kompaniya veb-saytlarini Cairn deb nomlangan avtonom penetratsion testlash dvigateli yordamida buzib kirgan. U nishonlarni tekshirish, kod bajarilishi yoki hisobni egallashga olib keladigan xavfsizlik zaifliklarini qidirish, kirishga urinish va maxfiy ma'lumotlarni o'g'irlash vazifasini bergan.

"SI bir vaqtning o'zida kuchaytiruvchi omil va kengayib borayotgan hujum yuzasi sifatida xizmat qilmoqda," deb aytdi Rapid7. "Generativ SI..."

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator.

TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published attacks that have leveraged ARTEX, an autonomous AI penetration testing framework, to single out entities in South Korea and Japan.

"These environments held reconnaissance and attack tools, scripts, target lists, results, logs, and command histories," security researchers Bakuei Matsukawa and Joseph C Chen said. "They ranged from workspaces used largely by hand by skilled operators to AI-agent platforms that automated the entire workflow, including command and control."

The first of the three attacks has been found to abuse CyberStrikeAI, another open-source penetration testing tool that was previously put to use in an attack campaign targeting Fortinet FortiGate appliances. The activity was concentrated in a short period in October 2026.

The AI-driven activity leverages the offensive security tool to automate various aspects of the attack lifecycle into a repeatable workflow, beginning with reconnaissance and vulnerability discovery and validation, and exploitation, to command-and-control (C2), persistence, data exfiltration, and automated reporting.

This involves delegating the work among 44 agents to handle various aspects of the attack, while also enabling the generation of forms and fake login pages in the Japanese language.

"In a short period, at least 19 identifiable organizations, including at least 16 in Japan, were subjected to validation activity," Trend Micro's enterprise security division said. "Each had a report in the same format and an index of evidence. These were outputs of a structured process run by the platform, rather than ad hoc notes left by an operator."

The second case has been characterized as a human-led attack with assistance from a large language model (LLM) to accelerate planning and tool development. Analysis of the infrastructure and artifacts indicates that the campaign is also designed to target AI workflow platforms and inference services with an aim to obtain large amounts of inference capacity at low cost.

One of the intrusions is said to have targeted a geographic information system (GIS) server exposed with default credentials, resulting in the theft of cadastral and commercial records, Windows credentials, and email data. The entire campaign lasted for 24 days in August and September 2026.

The third instance is where the AI's role has been found to be confined to developing the operator's tools and scripts, suggesting a limited role played by the technology in a series of campaigns designed to target edge devices from Cisco, Citrix, F5, and Yamaha using published vulnerabilities, management functions, or credentials present in configuration files.

The threat actor is estimated to have run at least six campaigns from January to October 2026, opportunistically striking exposed VPN devices and WebLogic servers. "The operator was experienced, with established practices for automation and evidence management," the researchers said.

There is currently no evidence at this stage that suggests these three incidents share an operator. It's also unknown if the attacks have targeted other regions and what AI models are being used to pull off the attacks.

That said, the attacks involving these threat actors are not restricted to Japan and neighboring countries like South Korea. The operator behind the first case has targeted organizations in Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in its WebLogic discovery lists.

"AI has increased the attackers' workforce, but the work still consists of looking for unlocked doors," TrendAI said. "The types of doors and the weaknesses that leave them open have not changed. What has changed is the ability to try thousands at once, adapt to the target country's language, and continue without fatigue."

The development coincides with the discovery of multiple campaigns in which threat actors of varied motivations have integrated agentic AI into existing offensive security workflows, allowing them to speed up research, malware development, social engineering, and other parts of an attack.

To make matters worse, AI is being increasingly used to accelerate reconnaissance, automate decision-making, and industrialize social engineering, shortening the time between exposure and exploitation of security flaws. According to Microsoft's 2026 Digital Defense Report, AI has collapsed the median time from vulnerability discovery to weaponization to well below 24 hours.

The adoption of AI by bad actors is reducing the time, expertise, and cost required to discover and exploit weaknesses, at the same allowing attackers and defenders alike to operate with greater speed, scale, and autonomy, the Windows maker added.

"The key issue is not simply whether an actor has frontier AI," Trend Micro said. "Access to capable models can already produce meaningful operational gains. Ecosystem depth, however, determines how reliably, independently, and at what scale those capabilities can be sustained."

"AI is no longer an experimental capability for APT groups; it is an operational component embedded directly into campaigns."

The growing demand for AI tools by threat actors has also opened up a new monetization avenue that peddles stolen AI provider session tokens and offensive AI tools APEX AI, MessiahGPT, and DarkGPT, further commoditizing cybercrime and lowering the barrier to entry for carrying out advanced, persistent, and evasive attacks.

Last week, Microsoft revealed that a China-state-aligned threat actor compromised a ConnectWise cloud backup application and used ARTEX to sign in to more than 2,250 Microsoft 365 tenants. The activity has been attributed to Storm-0940, which it said has used the framework since as early as September 2026 to automate password-spraying attacks on hundreds of organizations.

"While the majority of the targeting wasn't successful, Storm-0940 achieved privileged cloud persistence at many organizations in a brief time," Microsoft said. "Storm-0940's activity illustrates how a threat actor with a broad target set can use an agentic AI tool and privileged authentication material to quickly attempt to compromise many organizations."

According to local media reports from South Korea, authorities have identified seven suspects linked to a cybercrime operation that broke into more than 90 organizations in the country, most of which involved ARTEX. The 32-year-old mastermind behind the activity is alleged to have worked at a cybersecurity company between 2019 and 2022, gaining expertise in penetration testing.

In 38 of the incidents, the threat actors demanded ransom payments of 360 million won ($270,000) in exchange for not leaking the stolen data. More than 8.2 million records are believed to have been siphoned from compromised organizations.

Some of the other AI-oriented campaigns that have been documented in recent weeks are listed below -

• A financially-motivated threat actor operating under the handle BUGSTER configured the Hermes Agent framework with DeepSeek V4 as its reasoning engine and Cursor as a secondary tool (both with safety controls disabled) to run a WordPress brute-force campaign against an Indian university's website and generate a REST API enumeration report.
• The attacker also breached a second Indian public university, exfiltrating a database of more than 5,200 records, including personally identifiable information (PII) on students. A third attack enumerated an Indian site on a popular e-commerce platform to extract a storefront API token, admin email addresses, phone numbers, and payment merchant IDs.
• "The actor also built specialized AI bot profiles to acquire VoIP fraud expertise through conversation and maintained automated pipelines for Wi-Fi password cracking and cryptocurrency whale reconnaissance (i.e., identifying large cryptocurrency holders)," Palo Alto Networks Unit 42 said. "Notably, the Wi-Fi cracking capability requires close physical proximity to the target, indicating the actor had local access to the targeted locations."

• An e-crime group named CyberCartel has been observed using a multi-agent system called CARLIY0S to coordinate attacks against banks and payment providers across Latin America. The framework employs a cognitive swarm comprising four role-specialized Claude models that "debate each target and defer to one arbiter" before the main orchestrator acts. "The group assigned different roles to commercial AI models to analyze targets, develop attacks, and coordinate operations," Straiker said.
• Threat actors have developed an offensive AI agent designed to hijack exposed AI endpoints to run autonomous attacks, with instructions allowing it to carry out up to 100,000 steps without human approval while the legitimate owner of the exposed endpoint pays for the inference. The system features a malicious loop called Skynet mode that employs a set of 74 tools to scan for targets, infect them, deploy cryptocurrency miners, and reinfect compromised hosts.
• An affiliate for the The Gentlemen ransomware operation has used Anthropic Claude Code during intrusions into at least six organizations in late June 2026, including to generate and execute reconnaissance and exploitation commands, write malicious scripts, modify firewall policies, and identify high-value business systems.
• A credential-harvesting operation codenamed Zerofot built a scanner named "auto_scan" that integrated OpenAI Codex and Claude Code to harvest thousands of API keys and tokens from thousands of exposed hosts across the internet.
• An AI-generated Python framework called RAGE has been used to scan internet-facing services (e.g., Redis, Elasticsearch, Docker, Apache Tomcat, Jenkins, Hadoop YARN, Confluence, and Supervisord), exploit vulnerable deployments, capture credentials, and deploy cryptocurrency miners.
• A human operator employed frontier AI models to breach an enterprise network autonomously over a 10-hour period. "The actor breached a publicly accessible web service to tunnel into the network, deploying an automated recon agent to map internal microservices," Unit 42 said. "Sub-agents combed enterprise code repositories, extracting hard-coded tokens and service passwords." The attacker then harvested master administrative credentials and hijacked an enterprise code application to exfiltrate cloud access keys. The stolen cloud keys were then used to turn the victim's AI endpoints into post-compromise infrastructure.
• A suspected Russian-speaking cyber actor used an AI-assisted workflow to exploit PaperCut NG/MF servers and compromise hundreds of instances. "The campaign extended beyond initial exploitation into a structured post-exploitation pipeline covering Windows credential collection, service-credential harvesting, internal network pivoting, Metasploit automation, and victim packaging," Hunt.io said.
• A Chinese-speaking threat actor has breached websites belonging to more than 100 companies, including Deere, SharkNinja, and Cummins, using an autonomous penetration testing engine called Cairn, tasking it to probe targets, search for security weaknesses that could lead to code execution or account takeover, attempt to break in, and steal sensitive data.

"AI is serving as a force multiplier and an expanding attack surface at the same time," Rapid7 said. "Generative AI is accelerating established attack methods by reducing the time, skill, and coordination previously required to execute them at scale."

"Rather than introducing entirely new categories of exploitation, threat actors are integrating AI into existing workflows to industrialize phishing, automate reconnaissance, and refine malicious scripts with greater speed and precision."

Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.