A single operator used three open-source AI tools — Strix for vulnerability scanning, Cairn for autonomous exploitation, and Hermes for campaign orchestration — to target 105 online retailers between …
Gambit Security reconstructed an autonomous AI agent campaign that used three open-source tools — Strix, Cairn, and Hermes — to breach more than 100 online retailers, steal over 600,000 credit card re…
An attacker used open-source AI harnesses to hit 105 online retailers over five days, successfully compromising 27 of them at an average cost of $25 per attack, according to research published by Isra…
Gambit Security reported that a financially motivated attacker used three AI agent tools — Strix for vulnerability scanning, Cairn for objective pursuit, and Hermes for coordination running Anthropic'…
Gambit Security recovered a staging server used in the first documented large-scale autonomous AI agent breach campaign, which compromised at least 27 organizations since July 2026 and exfiltrated mor…
A Chinese-speaking operator used three open-source agent harnesses — Strix, Cairn, and Hermes — to compromise at least 27 companies between September 10 and September 15, 2026, according to incident-r…
A Chinese-speaking operator used three open source AI harnesses — Strix, Cairn, and Hermes — to compromise at least 27 companies, including a Fortune 500 hospitality company, a major US airline, a lar…
Gambit Security reported an ongoing campaign in which human-directed autonomous AI agents named Hermes, Strix, and Cairn automated multi-stage breaches of online retailers, deploying payment skimmers …
A financially motivated threat actor used three open source AI harnesses — Strix for vulnerability search, Cairn for autonomous exploitation, and Hermes for orchestration — to breach hundreds of onlin…
A wave of malicious gems on RubyGems.org, traced by researchers including the registry's maintainer to OpenAI's bot infrastructure, embedded code that exploited a caching vulnerability in RubyGems.org…
An autonomous penetration-testing agent called Strix discovered a live GitHub personal access token with admin rights to Baseten's product repositories, GitOps deployment repo, and private customer co…
An autonomous hacking agent discovered a live GitHub admin token in Baseten's infrastructure by pulling a public Docker image and reading its build history, according to a writeup by Strix. The token,…
DeepSeek V4 Flash 0731 solved only 2 of 16 Hack The Box challenges, scoring 8.2% on the HTB-Challenger Benchmark, and reported incorrect flags in 9 challenges, a false-positive rate unmatched by any o…
Hack The Box's new HTB-Challenger benchmark evaluates LLM models on offensive security challenges, addressing the high cost and comparability issues of existing methods. The benchmark, created by an a…
OpenAI released the SDK and CLI for Codex Security, joining a wave of open-source cybersecurity harnesses that includes Microsoft's Project Perception, Strix, Alibaba's Open Code Review, and Cloudflar…
Strix, an AI-powered penetration testing tool, crossed 43,400 GitHub stars and shipped v1.3.1 with GitHub Actions support, reporting only confirmed vulnerabilities with working exploits. Its multi-age…
Strix, an open-source AI penetration testing agent, reached 34,000 GitHub stars this week as a response to a surge in security vulnerabilities from AI-generated code. CVEs traced to AI-written code ju…
Researchers at Zenity documented three campaigns between March and May 2026 where attackers hijacked exposed LLM endpoints from Ollama and LiteLLM instances to run offensive AI operations. The attacks…
Zenity Labs revealed that attackers are weaponizing AI infrastructure, targeting exposed model gateways and unmanaged LLM endpoints. The firm's sensors detected thousands of real-world attacks, includ…