Hackers Use ARTEX AI Agents to Automate Active Directory AttacksNew
Google and Mandiant report ARTEX used since late August 2026 in attacks across multiple sectors including government and tech.
70
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenOct 30, 2026
- Last mentioned30m ago
Timeline
3 articles · newest firstHackers weaponize ARTEX AI agents for network intrusions
Attackers use autonomous ARTEX AI agents to automate intrusions, privilege escalation, and data theft across multiple organizations.
75
Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
80
Appears with
- Googlevendor · 3
- Google Threat Intelligence Grouporganization · 2
- Mandiantvendor · 2
- ARTEXproduct · 2
- and telecommunicationsvictim · 1
- Wizvendor · 1
- manufacturingvictim · 1
- ScopeWeaverproduct · 1
- CAIRNproduct · 1
- Mandiantorganization · 1
- Wiz Researchorganization · 1
- Hexstrikeproduct · 1
- Microsoftvendor · 1
- STORM-0940threat actor · 1
- Active Directoryproduct · 1
- ARTEX AI agentsmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.