[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7b6CqYI45sw5wmcbQLkNodqujNmO212Y2UIhHIyCoQo":3},{"article":4,"iocs":50,"watch_terms":54,"solutions":55,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"ef9ad3e3-b6d9-498f-bcf1-da5ddec363bd","Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm","chinese-actor-weaponizes-deepseek-ai-agent-to-attack-security-firm-506af1","Researchers from Jesta intercepted and investigated the model, which was attempting to compromise more than 1,200 hosts for proxyjacking and to launch further attacks","Researchers at Jesta discovered a weaponized DeepSeek AI agent deployed by a Chinese threat actor targeting their organization and potentially over 1,200 other hosts. The agent was configured to conduct proxyjacking and facilitate further attacks. This represents a notable escalation in the use of large language models and AI systems as attack vectors by state-sponsored groups.","Chinese actor weaponizes DeepSeek AI agent to attack security firm and compromise 1,200+ hosts.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fchinese-actor-deepseek-ai-agent-attack-security-firm","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblteed6585fb356f055\u002F6a6a5a483792ae4c0a587098\u002Frobot_skeleton-gremlin-Getty-531001422.jpg?width=720&quality=80&disable=upscale","2026-08-03T15:42:18+00:00","2026-08-03T18:00:12.698412+00:00",8,[17,20,23,26],{"name":18,"type":19},"Chinese state-sponsored actor","threat_actor",{"name":21,"type":22},"DeepSeek","product",{"name":24,"type":25},"Jesta","vendor",{"name":27,"type":28},"AI Agent","technology","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":29,"icon":31,"name":32,"slug":33},null,"Nation-state","nation-state",[35,40,45],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":41},{"id":42,"icon":31,"name":43,"slug":44},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":46},{"id":47,"icon":31,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[51],{"type":44,"value":52,"context":53},"DeepSeek AI Agent (weaponized)","Chinese state-sponsored actor using DeepSeek LLM for proxyjacking and lateral attack campaigns",[24,21],{"controls":56,"vendors":139},[57,86,114],{"slug":58,"name":59,"problem":60,"products":61},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"slug":49,"name":87,"problem":88,"products":89},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"slug":39,"name":115,"problem":116,"products":117},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":135,"product_name":136,"url":137,"description":138},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":154},"weaponized-ai-agent-used-by-chinese-threat-actor-to-target-security-firms","Weaponized AI Agent Used by Chinese Threat Actor to Target Security Firms","A Chinese threat actor weaponized a DeepSeek AI agent — configuring it to conduct proxyjacking and launch further attacks against a security firm and over 1,200 other hosts. This incident highlights a dangerous escalation: AI systems, if not rigorously sandboxed and monitored, can be repurposed as offensive tools by sophisticated adversaries. The root cause lies in insufficient configuration controls and monitoring around AI agent deployments, allowing malicious actors to exploit the trusted and capable nature of LLM-based systems. As state-sponsored groups increasingly weaponize AI, organizations that adopt AI agents without hardened controls become unwitting attack surfaces.",[145,146,147,148,149,150,151,152,153],"CIS Control 1 - Inventory and Control of Enterprise Assets","CIS Control 4 - Secure Configuration of Enterprise Assets and Software","CIS Control 13 - Network Monitoring and Defense","NIST SP 800-53 CM-6 (Configuration Settings)","NIST SP 800-53 SI-3 (Malicious Code Protection)","NIST SP 800-53 AU-12 (Audit Record Generation)","NIST AI RMF - Govern 1.1 (AI Risk Policies)","MITRE ATLAS - AML.T0051 (LLM Prompt Injection \u002F Agent Abuse)","ISO\u002FIEC 27001 A.12.4 (Logging and Monitoring)",{}]