N-able security advisory (AV26-1143)

HPE security advisory (AV26-1144)

Attackers breached 10 organizations with an open-source AI pentest framework

Chinese-speaking attackers used Cairn, an open-source AI penetration testing framework, to run 25 operations against at least 19 organizations in August and September 2026. Palo Alto Networks’ Unit 42 found that the attackers gained unauthorized access or pulled data at 10 of them, often after typing little more than a domain name and a one-line goal. Most of the targets fall into three groups: seven in the semicondu…

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

ARTEX is an open-source, LLM-driven autonomous penetration-testing framework, and its web console is now deployed at scale on U.S. commercial hosting. Starting from internet-wide scanner telemetry, SOCRadar researchers merged and de-duplicated 1,295 U.S.-hosted candidate instances, re-validated each one, and confirmed 916 live ARTEX-family consoles in a snapshot taken on November 11, 2026. The software was […]

Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era

Upgrade, migrate, but don't prevaricate – time has run out