Loading story…
REMnux v8 was released as a major rebuild of the malware-analysis Linux distribution, moving its base to Ubuntu 24.04 ahead of Ubuntu 20.04 end-of-life and introducing a new Cast-based installer that supports fresh installs, upgrades, and installing REMnux tooling onto an existing Ubuntu system. A headline addition is the REMnux MCP server, which implements the Model Context Protocol (MCP) to connect AI agents to REMnux’s 200+ preconfigured malware-analysis tools with embedded practitioner guidance on which utilities to use for different artifact types.
Separately, PentestAgent was published as an open-source AI agent framework for penetration testing, featuring a terminal UI with assisted, autonomous, and multi-agent “crew” modes, plus prebuilt attack playbooks and HexStrike integration. It is designed to drive black-box assessment workflows (reconnaissance, scanning, exploitation) using LLMs via LiteLLM and a RAG-backed knowledge system, with session artifacts and findings persisted (e.g., loot/notes.json) to inform subsequent agent actions; the project emphasizes authorized-use constraints.
Get the actors, campaigns, and ATT&CK mapping behind it.
2 events from the most recent confirmed update back to the earliest known activity.
REMnux released version 8 of its Linux malware analysis distribution, rebuilding the platform on Ubuntu 24.04 as Ubuntu 20.04 approaches end-of-life. The update added a Cast-based installer, a new MCP server for connecting AI agents to more than 200 analysis tools, refreshed utilities, and new tooling such as YARA-X.
A developer and researcher using the alias Masic (GH05TCREW) released PentestAgent, an open-source AI agent framework for authorized penetration testing, on GitHub. The project includes prebuilt attack playbooks, HexStrike integration, and support for LLM-assisted black-box assessments.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
2 references tracked. Mallory keeps watching after this page renders.
helpnetsecurity.com
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Two new **AI-assisted offensive security** efforts were highlighted: *BlacksmithAI*, an open-source penetration testing framework, and a **Kali Linux** workflow that enables natural-language control of common pentesting tools via Anthropic’s **Claude**. BlacksmithAI is described as a hierarchical, multi-agent system where an orchestrator decomposes assessment goals and delegates work to specialized agents aligned to typical pentest phases (recon, scanning/enumeration, vulnerability analysis, exploitation, and post-exploitation), then compiles results into reporting. Separately, Kali Linux was reported to support a native AI-assisted workflow by integrating Claude through the open-source **Model Context Protocol (MCP)**, using an `mcp-kali-server` package to translate plain-English prompts into tool execution (e.g., Nmap/Gobuster/Metasploit), parse outputs, and return structured findings and prioritized reporting. Both items reflect a broader shift toward **agentic and conversational interfaces** for offensive tooling, reducing reliance on manual CLI syntax while automating planning, execution, and summarization of assessment steps.
Jun 29, 2026
Security researchers and vendors documented rapid progress in using large language models and autonomous agents for offensive security testing, from early machine-learning-driven exploitation in **Deep Exploit** to newer multi-agent systems such as **BLADE** and Mastra-based workflows. In controlled demonstrations, these systems automated parts of reconnaissance, privilege-escalation analysis, credential discovery, lateral movement, and reporting, while broader evaluations found modern models increasingly capable of code understanding, vulnerability reasoning, and black-box web assessment tasks. The reporting also highlighted industry milestones such as AI-assisted pentesting tools reaching top bug bounty rankings and the growing use of agent patterns including **ReAct**, **Plan-and-Execute**, and orchestrated multi-agent designs for security assessments. At the same time, the same body of work warned that AI-for-security deployments are creating new attack surfaces. Researchers observed internet scanning for exposed OpenAI-compatible `Chat Completions` endpoints, with likely goals including fingerprinting LLM servers, abusing unauthenticated inference, causing denial of service, and reaching downstream integrations such as **RAG**, tool calling, and URL fetching. Separate analysis warned that long-term memory in AI agents can preserve attacker-influenced instructions, stale conclusions, or misleading context across sessions, making provenance, freshness, access control, correction, and deletion critical controls. Across the studies, the message was consistent: AI agents are becoming more useful for security operations and testing, but their deployment requires strict governance, authentication, and safeguards against prompt injection, unstable execution, and low-quality automated findings.
Aug 15, 2026
Researchers published **"From Controlled to the Wild: Evaluation of Pentesting Agents for the Real-World"** on arXiv, proposing a new framework to measure how AI-driven pentesting agents perform against realistic targets rather than narrow benchmark tasks. The paper argues that common evaluations such as capture-the-flag challenges, exploit reproduction, remote code execution tests, and trajectory matching do not adequately reflect real offensive security work across complex environments with multiple attack surfaces and vulnerability classes. The proposed protocol emphasizes validated vulnerability discovery using expert-maintained ground truth, LLM-assisted semantic matching, bipartite resolution for ambiguous findings, repeated testing of stochastic agents, and efficiency metrics. The authors also describe a reduced-suite selection method to lower experimentation costs and released annotated ground truth and supporting code to improve reproducibility; the work was later highlighted in a **r/netsec** post discussing an open evaluation framework for AI pentesting agents on real-world targets.
Jul 23, 2026