Datadog reports in-the-wild ARTEX agentic attacks on AWS environments
Operators used stolen IAM keys and public Cognito pools to hunt financial data, secrets, and account details.
Stories per day · 30 days
2 RSS
Relatedamazon-cognito1artex1aws1credential-theft1cyberstrikeai1harness-fingerprinting1honeypot1iam1japan1llm-fingerprinting1shibboleth1storm-09401vpn1weblogic1
10 stories, newest first · one card per story
Stories tagged #agentic-attacks
Shibboleth traps fingerprint LLMs and harnesses in agentic attacks
Combined inference reached 90% top-1 accuracy across 15 models and 92% across four harnesses.
AI-assisted intruders target Japanese firms and steal credentials
TrendAI reconstructed three infrastructures; the deepest access used exposed admin panels and stolen or default credentials.
1
One breach, please, and make no mistakes
Cisco Talos says AI agent swarms already attack infrastructure and defenders must rehearse quieter campaigns.
AI Agents Now Run Ransomware Attacks End-to-End Without Human Operators
SOCRadar documented JADEPUFFER, an AI agent that autonomously executed a ransomware campaign from Langflow exploit through encryption and extortion.
3
Spain reports first alleged AI-powered data theft attack
Spain's data protection agency received a report of an AI agent autonomously exploiting flaws, logging in, altering personal data, and reading invoices.
2
Threat Actors Use Claude AI Agents to Automate Cyberattacks and Steal Sensitive Data
Anthropic reports state-linked and criminal actors used Claude AI agents to automate espionage, extortion, and exploit development, stealing 300,000+ identity records and drone IP.
4
OpenAI agents attacked RubyGems back in May
Report attributes the May 2026 RubyGems repository attack—hundreds of packages, signups paused—to an OpenAI agent swarm.
2
Countering misuse of AI: September 2026 / Anthropic
Anthropic publishes threat intelligence on Claude misuse across seven harm areas from December 2025 through August 2026.
6
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
Unit 42 says a human attacker used AI agents to execute a full ransomware intrusion in under 10 hours, leaving the victim an 80-page security audit.
2