[CLSTR]
API
< Back to all clusters
[TECHNOLOGY] · United States · 13 sources

started · updated

Part of situation: Storm-0940 hacking group ConnectWise breach (2 clusters)

AI agents drive surge in cybersecurity threats and exploits

AI agents cybersecurity Linux kernel exploits ARTEX OpenAI

The rapid development of autonomous AI agents and open-source frameworks like ARTEX is creating significant new security challenges. Cybercriminals are increasingly using these tools to automate attacks, targeting financial institutions and stealing sensitive data, including over 190,000 gaming credentials and hundreds of Apple code-signing certificates.

In a major demonstration of AI capability, OpenAI reported that an autonomous pipeline developed 948 working root exploits for unique Linux kernel vulnerabilities in a single run. This scan, which cost approximately $1.2 million in API credits, also identified at least 10 novel Linux exploitation techniques.

Security professionals are struggling to keep pace. Reports indicate that incident response teams are facing unprecedented pressure as AI-driven attacks scale in frequency and complexity. Furthermore, research shows that nearly half of security teams find it difficult to establish what constitutes normal behavior for AI agents, making it harder to detect anomalous or malicious activity before damage occurs.

Entities

Check Point · Check Point Software Technologies · ConnectWise · GitHub · Linux · Michael Grinich · Microsoft · OpenAI · Storm-0940 · WorkOS

Claims

What the coverage asserts, and how many sources carry each claim.

  • [○ 1 SOURCE] The OpenAI AI pipeline scan cost approximately $1.2 million in API credits. smartechdaily.com
  • [○ 1 SOURCE] The AI agents discovered at least 10 novel Linux exploitation techniques. smartechdaily.com
  • [○ 1 SOURCE] ARTEX agents stole more than 190,000 gaming credentials. cybernoz.com
  • [○ 1 SOURCE] An autonomous AI pipeline developed working root exploits for 948 unique Linux kernel vulnerabilities. smartechdaily.com
  • [○ 1 SOURCE] Storm-0940, a China-state-aligned actor, is responsible for the ConnectWise Cloud Backup compromise. www.blackberry.com
  • [○ 1 SOURCE] ARTEX agents stole over 300 Apple code-signing certificates. cybernoz.com
  • [● 2 SOURCES] The ARTEX framework was used to reach privileged cloud access in less than three hours in multiple cases. www.blackberry.com · nemesishd.gr

Sources

Digitale Autonomie im Visier [www.all-about-security.de]
GitHub Copilot Fusion: KI-Orchestrierung kostet 5,59 Dollar pro Aufgabe [borncity.com]
ARTEX: Κυβερνοεγκληματίες από την Καμπότζη στρέφουν το εργαλείο επιθέσεων με τεχνητή νοημοσύνη κατά του χρηματοπιστωτικού τομέα [nemesishd.gr]
Das KI-Wettrüsten der Angreifer zwingt zur Prävention [netzpalaver.de]
AI-Driven Supply Chain Attack Reached Privileged Cloud Access in Under Three Hours [www.blackberry.com]
KI-gestütztes Hacking nimmt zu: Große Anbieter nehmen keine Notfälle mehr an [www.it-boltwise.de]
Check Point Research alerta: Agentes de IA visaram 292 domínios em tentativa de roubo de criptomoedas [www.netthings.pt]
Agentes de IA burlam limites ao trabalhar em time, diz CNBC [www.spacemoney.com.br]
WorkOS ihlali: ARTEX ajanı kontrolden çıktı iddiası [www.techinside.com]
ARTEX AI Agents Steal 190,000 Gaming Credentials and Hundreds of Apple Code-Signing Certificates [cybernoz.com]
New Research from Abnormal AI Finds Nearly Half of Security Teams Say They Can’t Tell What Normal Behavior Looks Like for AI Agents [www.finopotamus.com]
Agents Got Root: OpenAI Reports 948 Linux Kernel Exploits [smartechdaily.com]
When an AI Agent Takes a Harmful Action, the Window to Stop It Was Before Execution [data443.com]