Loading story…
Resecurity warned that autonomous AI offensive security agents are turning penetration testing from scripted automation into adaptive, multi-agent operations that can perform reconnaissance, map attack surfaces, identify vulnerabilities, validate exploits, and generate reports with minimal human input. The report highlighted tools including T3MP3ST, Strix, CyberStrike, XBOW, PentAGI, PentestGPT, Nebula, PentesterFlow, Hackian, and specialized offensive-security LLMs such as CyberStrike-OffSec-35B, describing them as increasingly capable dual-use systems.
Security researchers said the same capabilities are lowering the barrier for financially motivated criminals and state-backed actors, making AI-assisted offensive operations practical rather than theoretical. The reporting cited examples including FortiBleed, JadePuffer, GTG-2002, GTG-5004, and the Claude Desktop “double agent” demonstration, and urged organizations to respond with a hybrid defense model built on human oversight, behavioral detection, network segmentation, continuous exposure validation, governance of AI tooling, and rapid patching of high-value flaws.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
8 events from the most recent confirmed update back to the earliest known activity.
Security Affairs reported on Resecurity's warning that cybercriminals are leveraging autonomous AI offensive security agents and that organizations should adopt hybrid defensive measures.
Resecurity published an analysis warning that autonomous offensive security agents are transforming penetration testing and lowering barriers for cyberattacks while creating dual-use risks.
Anthropic reported that it detected and disrupted an AI-assisted cyber-espionage campaign in which attackers used custom scaffolding on top of Claude Code for reconnaissance, vulnerability discovery, exploit development, credential harvesting, lateral movement, and exfiltration. The article says Carnegie Endowment linked the operation to Chinese groups targeting foreign governments and critical infrastructure.
The Resecurity article cites the Claude Desktop 'double agent' demonstration as evidence of AI systems being used in ways relevant to offensive cyber operations.
Resecurity's article lists GTG-5004 as a case study evidencing AI-enabled offensive security activity in practice.
The sources name GTG-2002 as an example supporting the claim that autonomous or AI-assisted offensive cyber operations are already practical.
JadePuffer is identified as a case study used to illustrate real-world AI-enabled or AI-assisted offensive security activity.
The references cite FortiBleed as a case study showing that AI-assisted offensive cyber operations have already occurred in practice rather than remaining theoretical.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
3 references tracked. Mallory keeps watching after this page renders.
codeby.net
Open sourcesecurityaffairs.com
Open sourceresecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Recent research and evaluations indicate **AI agents are becoming capable of finding and exploiting vulnerabilities with high success rates using standard offensive tooling**, lowering the barrier to semi-autonomous attacks. A study by Irregular in collaboration with **Wiz** reported that leading models (Anthropic *Claude Sonnet 4.5*, OpenAI *GPT-5*, and Google *Gemini 2.5 Pro*) solved **9 of 10** web security CTF challenges modeled on real-world incident patterns, including **authentication bypass**, **exposed secrets**, **stored XSS**, and **SSRF** (including **AWS Instance Metadata Service (IMDS)**-style SSRF). Researchers noted that even when success required multiple stochastic runs, the **low per-run cost (~$2) and limited repeats** could make exploitation practical without necessarily triggering monitoring, with most challenge successes costing **under $1** and multi-run cases totaling roughly **$1–$10**. Separate evaluation results highlighted by Bruce Schneier, citing an Anthropic post, describe *Claude Sonnet 4.5* successfully executing **multistage attacks across simulated networks** using only **standard open-source tools** rather than custom cyber toolkits, including exfiltrating all simulated PII in a high-fidelity **Equifax-breach** simulation by recognizing and exploiting a known **publicized CVE**. In parallel, Dark Reading reported security concerns around the rapid adoption of an open-source autonomous assistant, **OpenClaw** (formerly *MoltBot/ClawdBot*), which can connect to email, files, messaging, and system tools, execute terminal commands and scripts, and maintain memory across sessions—creating **persistent non-human identities and access paths** that may fall outside traditional **IAM** and secrets controls, increasing enterprise risk as “bring-your-own-AI” agents gain privileged access.
Jun 29, 2026
An expert-authored **International AI Safety** report says AI agents are increasingly being used to support multiple stages of cyberattacks, with notable gains over the past year in vulnerability discovery and malicious code generation. The report cites results from DARPA’s AI Cyber Challenge where finalist systems autonomously identified **77% of synthetic vulnerabilities**, and notes criminal use of AI tooling (e.g., *HexStrike AI*) to accelerate exploitation soon after public vulnerability disclosures; it also describes a growing market for “weaponized” models that can generate ransomware and data-stealing code at low monthly cost. Despite these advances, the report assesses that **fully autonomous, end-to-end, multi-stage attacks** are not yet commonly observed because current AI systems struggle to reliably execute long, complex sequences without human oversight, including poor error recovery and irrelevant command execution. Separately, CSO Online highlights risk-management concerns that large numbers of deployed **AI agents** could “go rogue,” underscoring governance and control challenges as organizations operationalize agentic AI at scale.
Jun 29, 2026
Security leaders are warning that **agentic AI** is shifting the threat model by turning authenticated, permissioned access into a primary attack path. Symantec argues that controls designed around human behavior and pace (e.g., static credentials, overprivileged access, and human-scale monitoring) are poorly suited to autonomous agents that can operate at machine speed, rapidly probing APIs and systems and using existing permissions to move laterally. The post highlights proof-of-concept and prior incidents where agent behavior can be manipulated to expose secrets (e.g., coercing a voice agent to reveal an API key), framing an agent’s own decision logic as an exploitable attack surface that drives the need for redesigned authorization and tighter identity/access models. Microsoft threat intelligence reporting, echoed in an interview with *The Register*, describes threat actors using AI agents to automate “janitorial” tasks that materially increase operational tempo—especially **reconnaissance** and **attack infrastructure** setup/management. Sherrod DeGrippo (Microsoft) said autonomous agents can be tasked to scan target netblocks, inventory compromised environments, and accelerate standing up infrastructure, and Microsoft has observed North Korea-linked **Coral Sleet** leveraging development platforms to quickly create and manage infrastructure supporting campaigns (including activity associated with the fake IT worker scam). Together, the reporting indicates agentic AI is already being applied to make attacks **better, bigger, and faster**, with defenders needing to account for automated, high-velocity activity that may originate from valid credentials and legitimate tooling.
Jun 29, 2026