[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHxUkNXVuLQLn0Q5_gZRa_EsSiiM8s2HLE8WH8F3Wj9E":3},{"article":4,"iocs":55,"watch_terms":56,"solutions":57,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"baab6b82-b9d5-4e09-90a8-d5ce9c56ce07","China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days","china-backed-threat-group-used-agentic-ai-pentesting-tool-to-compromise-140-sens-080367","Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed. The post China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days appeared first on CyberScoop.","A China state-backed threat group, tracked as Vapor Panda, is leveraging an agentic AI penetration testing framework called ARTEX to conduct a rapid and large-scale campaign. The group has targeted over 200 organizations in 14 countries, compromising approximately 140 sensitive targets in just 11 days, with targets including foreign ministries, defense agencies, and critical infrastructure sectors. This marks a significant escalation in the use of AI by nation-state actors, enabling unprecedented speed and scale in cyberattacks.","China-backed Vapor Panda uses AI pentesting tool ARTEX to compromise 140 targets in 11 days.","https:\u002F\u002Fcyberscoop.com\u002Fchina-vapor-panda-agentic-ai-artex-campaign-crowdstrike\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2023\u002F09\u002FGettyImages-1555636785.jpg","2026-10-30T21:30:00+00:00","2026-10-30T22:00:16.824208+00:00",9,[17,20,23,26,28,30],{"name":18,"type":19},"Vapor Panda","threat_actor",{"name":21,"type":22},"ARTEX","product",{"name":24,"type":25},"CrowdStrike","vendor",{"name":27,"type":22},"DeepSeek",{"name":29,"type":19},"Storm-0940",{"name":31,"type":25},"Microsoft","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":32,"icon":34,"name":35,"slug":36},null,"Nation-state","nation-state",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[24,31,21],{"controls":58,"vendors":138},[59,87,113],{"slug":60,"name":61,"problem":62,"products":63},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":81,"vendor_name":31,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"slug":88,"name":89,"problem":90,"products":91},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":81,"vendor_name":31,"vendor_logo":82,"product_slug":109,"product_name":110,"url":111,"description":112},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":49,"name":114,"problem":115,"products":116},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":134,"product_name":135,"url":136,"description":137},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",[139],{"slug":140,"name":24,"logo_path":141,"roles":142},"crowdstrike","\u002Fvendor-logos\u002Fcrowdstrike.png",[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":156},"ai-powered-nation-state-attacks-demand-faster-defense-cycles","AI-Powered Nation-State Attacks Demand Faster Defense Cycles","China-backed threat group Vapor Panda leveraged an agentic AI pentesting framework called ARTEX to compromise approximately 140 sensitive targets across 14 countries in just 11 days — a pace no traditional human-led attack campaign could match. The root cause is a systemic failure in vulnerability management: organizations were not identifying and remediating exploitable weaknesses faster than adversaries could discover and weaponize them. AI dramatically compresses the attacker's reconnaissance-to-exploitation timeline, rendering slow patch cycles and manual monitoring dangerously inadequate. This incident signals a new threat era where defenders must adopt equally automated, continuous vulnerability discovery and response capabilities to remain viable.",[149,150,151,152,153,154,155],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","MITRE ATT&CK T1566: Phishing","NIS2 Article 21(2)(b)","CIS Control 17: Incident Response Management",{"NIS2 Article 21(2)(b)":157,"MITRE ATT&CK T1566: Phishing":158,"NIST SP 800-53 SI-2: Flaw Remediation":159,"CIS Control 17: Incident Response Management":160,"CIS Control 7: Continuous Vulnerability Management":161,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":162,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":163},"NIS2 mandates incident handling and risk management measures for operators of essential services — the foreign ministries and critical infrastructure entities targeted are precisely the entities obligated to maintain robust detection and response capabilities under this article.","While the primary vector here is automated AI exploitation, MITRE ATT&CK provides the adversary behaviour modelling framework needed to map ARTEX's reconnaissance and exploitation techniques and build detection rules proportionate to AI-accelerated attack chains.","SI-2 requires organizations to identify, report, and correct information system flaws within defined timeframes — a mandated rapid remediation cycle would have directly reduced the attack surface exploited across 140 targets in 11 days.","The 11-day, 140-target compromise window indicates victims lacked the rapid detection-to-containment cycle demanded by a mature incident response program; CIS Control 17 prescribes the planning and exercises needed to respond at a speed commensurate with AI-driven attacks.","ARTEX succeeded by finding and exploiting unmitigated vulnerabilities at machine speed; a continuous vulnerability management program with automated scanning and enforced remediation SLAs would have closed exposure windows before the AI tool could act.","This control explicitly requires timely identification and remediation of technical vulnerabilities, which if rigorously applied across the targeted foreign ministries and defence agencies would have prevented rapid exploitation by ARTEX.","Restricting access to sensitive systems through strong identity controls would have limited the blast radius of each AI-automated compromise, preventing lateral movement from one target to sensitive data stores."]