Feng Xue

autonomous agent can very likely achieve RCE on more than half of the Fortune 500. From what I’ve seen over the weekend while playing with Artex Pro.

An update on the WorkOS security incident: Shortly after our original bulletin, a security researcher contacted us and claimed responsibility. They told us they were evaluating ARTEX, an autonomous penetration testing framework, when their agent escaped its isolated testing environment and interacted with WorkOS unintentionally. We asked for technical evidence. The researcher provided request details, timestamps, and artifacts from the activity. Our security team and an independent forensic investigator matched that evidence against our logs, establishing with high confidence that this individual was responsible for the unauthorized activity we observed. The researcher has confirmed that all WorkOS data obtained by their agent has been deleted and was not shared with anyone else. Their explanation that the activity was unintended does not change how seriously we take the incident or our responsibility to our customers. Full report: workos.com/security/bulletin…

Are there human operated attack campaigns anymore?

I can see the future 🔮 You’ll soon be sick of hearing the word “ARTEX” ten times a day

Since the folks at ThreatBook developed both Artex and CyberStrikeAI, we figured we should contribute a bit to defending against and tracking AI agent attacks by sharing two feeds of instances running these agents on the public internet. Grab them if needed. Feeds: threatbook.io/hubfs/Feeds/AR… threatbook.io/hubfs/Feeds/CS…

The agents also discovered and used at least 10 Linux exploitation techniques that, to the best of our knowledge and all of the experts that we consulted, are novel. This suggests frontier LLMs can discover and patch new approaches to exploitation, beyond simply applying known techniques.

Holy Shit. In a new critical advisory issued TODAY, India's cyber agency CERT-In says hackers are using AI-assisted tools to attack financial institutions, exploiting payment APIs and testing transfers with just ₹1 before moving larger sums. CERT-In identifies the group as CRAFTY FALCON and says it is using FOUR publicly available AI offensive-security systems: ARTEX, PentAGI, Cairn and CyberStrikeAI. The campaign is still succeeding against fintechs and NBFCs, including firms that had already been warned and attempted remediation. Some were deliberately targeted AGAIN, while attackers are timing intrusions around weekends and holidays when security monitoring is lower.

autonomous agent can very likely achieve RCE on more than half of the Fortune 500. From what I’ve seen over the weekend while playing with Artex Pro.

Silverfox isn't really associated with CCP. They're more of an independent cybercrime group. They are still APT, but APT doesn't necessarily mean associated with the government. The group is infamous within China for targeting... China.

‼️ An unknown APT group likely poisoned the supply chain of a custom Windows 10 build for Asian governments, Kaspersky says. Its NetamLoader malware hid in a Windows Update folder among real Patch My PC files and ran via Microsoft-signed .NET code.

People kept asking me for “ARTEX signatures” and “Cairn indicators”, so I wrote this We found useful fingerprints and wrote rules. But identifying the framework isn’t the same as covering the attacks it orchestrates. I wanted to explain that distinction, why attribution gets harder, and how noisy attacks can still succeed by moving fast. I expect these frameworks to have a much bigger impact in the coming months. It’s worth understanding the technology behind the current attack waves, because I suspect they’ll build into a flood. #ARTEX #Cairn nextron-systems.com/2026/10/…