Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
2
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #llm-abuse
AI is giving attackers a head start, Microsoft warns
Microsoft's 2026 Digital Defense Report warns attackers are using AI to find bugs, craft malware, and run intrusions faster than defenders.
2
Social Engineering in the Age of Synthetic Media
Recorded Future details how threat actors abuse jailbroken and legitimate AI tools to scale phishing, deepfake impersonation, and phishing-as-a-service operations.
19
AI-Powered Threats Exploit Digital Trust Through Autonomous Breach Techniques
A PRC-linked group used Claude Code as an autonomous operator for espionage, while researchers identified the first Android malware leveraging generative AI.
6