Unit 42 says attackers are using AI red-team tools ARTEX and CyberStrikeAI in real intrusions
Palo Alto Networks researchers counted 609 internet-facing hosts running ARTEX and 1,323 running CyberStrikeAI as of October, and saw ARTEX turn password-reset pages and exposed APIs into cloud access, sometimes in under a day.