CYBERSTRIKEAICyberStrikeAI

Open-source AI penetration testing platform abused by threat actors, according to TrendAI (Trend Micro) as relayed by The Hacker News, which notes earlier abuse in a campaign against Fortinet FortiGate appliances. In one of three attacker environments TrendAI found exposed, active in October 2026 against organisations mainly in Japan, and also in Taiwan and Hong Kong, it automated the whole lifecycle with 44 agents, from reconnaissance and vulnerability validation to exploitation, C2, persistence, exfiltration and reporting, including Japanese-language forms and fake login pages; at least 19 organisations were subjected to validation activity. Distinct from the ARTEX framework. The operator is not attributed. Dual-use: its presence alone does not indicate malicious activity.