In brief On October 21, 2026, Microsoft said a China-state aligned group it tracks as Storm-0940 used an AI-driven penetration testing tool to compromise IT services firm ConnectWise — then used that foothold to target hundreds of organizations worldwide. The tool is ARTEX: an open-source, multi-agent AI framework, written in Go, that runs an entire … Read more
In brief Illumio’s new report “Licensed to Act: How AI Autonomy Is Outrunning the Limits Placed on It,” published October 21, 2026, surveyed 1,100 IT and security decision-makers across 10 markets on how much authority they have handed to AI. The headline figures: 70% of organizations now let AI make decisions and take actions that … Read more
In brief Security researchers at Straiker have published the first investigation of a criminal group running AI-orchestrated attack operations from inside its own working environment — a system called CARLIY0S, operated by the CyberCartel-linked Tr4nsHack Team against Latin American banks and payment providers. CARLIY0S is not one AI doing one thing: it is a role-specialized … Read more
In brief A joint advisory (AA26-293A), published October 20, 2026, by CISA, the FBI, the US Secret Service, Germany’s Landeskriminalamt Rheinland-Pfalz, and two UK agencies, names SafePay one of the most active ransomware operations of 2026. SafePay has affected at least 600 organizations across multiple critical infrastructure sectors since August 2024, with victims in North … Read more
A single hacker broke into the websites of more than 100 companies — including John Deere, SharkNinja, and Cummins — by handing the work to AI agents and spending about $5,000. Here is how the attack worked, what each breach cost, and why Microsoft now treats AI agents as insider threats. In brief What happened: … Read more