Armed with AI, hackers target endpoint security blind spots, raising stakes for CISOs
A China-linked hacking group’s use of AI agents to identify security weaknesses during a global espionage campaign is raising concerns about whether enterprises can detect gaps in their defenses before automated attacks exploit them. CrowdStrike reported that the group, tracked as VAPOR PANDA, used an AI-powered penetration testing framework called ARTEX to target more than 200 organizations worldwide over an 11-day period beginning October 17. The organizations included government agencies and businesses across at least 14 countries, with researchers confirming post-exploitation activity at nine. At a global pharmaceutical company, the attackers instructed AI agents to examine running processes and folder listings on Windows machines to determine whether CrowdStrike’s Falcon sensor was installed, according to transcripts recovered by the cybersecurity firm. ARTEX uses multiple AI agents to carry out intrusion tasks under human direction. CrowdStrike found that VAPOR PANDA used the fra