AI-Powered Attacks Target Government Linux Infrastructure

The CL-UNK-1211 espionage campaign used AI-assisted workflows to infiltrate government entities and state-affiliated Linux infrastructure between October 2025 and April 2026, according to the report. The attackers embedded conversational annotations and step-by-step notes in their operations that indicated automated code generation.

Meet CL-UNK-1211, a sneaky AI-powered espionage campaign that infiltrated government entities and state-affiliated infrastructure between October 2025 and April 2026. The attackers cleverly embedded AI into their workflow, using conversational annotations and step-by-step notes that hinted at automated code generation.