Attackers breached 10 organizations with an open-source AI pentest framework

Picus puts AI agents on the offensive with autonomous pentesting

Picus Security has announced Picus Autonomous Penetration Testing, an agentic pentesting capability that puts AI agents on the offensive: they think like attackers, chain real exploits toward an organization’s crown jewels, and prove what a breach would look like, under governance the agent cannot override. The launch rebuilds Picus’s automated penetration testing for the agentic era on five years of enterprise deplo…

Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

Our analysis of how attackers used the open-source Cairn AI agent framework to autonomously breach semiconductor, defense and civic targets. The post Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors appeared first on Unit 42.

N-able security advisory (AV26-1143)

ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.

ARTEX is an open-source, LLM-driven autonomous penetration-testing framework, and its web console is now deployed at scale on U.S. commercial hosting. Starting from internet-wide scanner telemetry, SOCRadar researchers merged and de-duplicated 1,295 U.S.-hosted candidate instances, re-validated each one, and confirmed 916 live ARTEX-family consoles in a snapshot taken on November 11, 2026. The software was […]