The Wave

1. YesterdayThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. YesterdayThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 2h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 5h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
3. 5h agoWiz ResearchThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz BlogWiz Research reviews public and private cases to outline recurring fingerprints of AI-agent-driven intrusions, including ARTEX, Hermes and custom agentic workflows.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks18 linked
4. 3d agoSecurityWeek · research by HuntressHackers Deploy Malware in Fresh ScreenConnect CampaignHuntress reports an intruder abused a third-party RMM+ extension in cloud-hosted ScreenConnect partner panels to push attacker-controlled ScreenConnect clients to at least 288 computers across 48 organizations, prompting ConnectWise to disable five extensions.

   4 articles · The Register

   1. 3d agoSecurityWeekPickupHackers Deploy Malware in Fresh ScreenConnect Campaign
   2. 3d agoThe RegisterPickupHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
   3. 3d agoCybersecurity DivePickupConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
   4. 2d agoCyberScoopEarliestRogue remote-access campaign spread through ScreenConnect add-on, researchers say

   Cyber32 linked
5. 2d agoYahooMicrosoft says it "restored service" after major worldwide outageMicrosoft 365 outage disrupted Outlook, Teams and Copilot worldwide for a second day, with Microsoft attributing it to cascading server health-check failures across data centers and no sign of a cyberattack.

   4 articles · 2 outlets · WIRED

   1. 2d agoYahooPickupMicrosoft says it "restored service" after major worldwide outage
   2. 2d agoWIREDEarliestThe Microsoft Outage Is a Warning for the World
   3. 2d agoWIREDPickupMicrosoft 365 Crawls Back to Life After a 24-Hour Outage
   4. YesterdayYahooPickupMicrosoft says services fully restored after day-long global outage

   Microsoft 365 outage lasts about 24 hours, renewing dependence concerns89 linked
6. 3d agoBleepingComputer · research by PrevidianNew N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedThreat actors began exploiting the public 4EverAble2Shell zero-day in N-able N-central within hours of its proof-of-concept release, deploying cryptominers on compromised servers.

   2 articles

   1. 3d agoBleepingComputerPickupNew N-able "4EverAble2Shell" zero-day exploited hours after PoC released
   2. 2d agoSecurityWeekEarliestHackers Exploit New N-central Zero-Day Hours After PoC Publication

   CyberN-able N-central zero-days exploited after researcher publishes exploit code22 linked
7. CTYesterdayCisco TalosARTEX and beyond: AI-enabled penetration testing platformsCisco Talos documents growing in-the-wild misuse of AI-enabled penetration testing frameworks, focusing on the ARTEX platform used by criminal and China-nexus actors to automate reconnaissance and intrusion, and lists associated tooling and detection coverage.1 outletCyberAI16 linked
8. YesterdayMicrosoft Security BlogSCKit abuses ScreenConnect to deploy remote access and target technician sessionsMicrosoft Threat Intelligence details SCKit, a worm that abuses hijacked ConnectWise ScreenConnect sessions to install unauthorized clients, persist on customer endpoints, and target technician workstations and browser-held console cookies.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers6 linked
9. YesterdayN-ableN-able Vulnerability Remediation UpdateN-able details how it patched N-central through hotfix HF2 after two rounds of undisclosed zero-day vulnerabilities, bringing its hosted servers back online while deferring remaining authenticated and agent impersonation fixes to a forthcoming HF3.1 outletCyberN-able N-central zero-days exploited after researcher publishes exploit code12 linked
10. YesterdayYahooGerman experts warn against digital dependence after Microsoft outageGerman experts respond to a global Microsoft 365 cloud outage by warning that dependence on a single provider threatens businesses, schools and government, and urging more European alternatives and fallback options.1 outletCyberMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns17 linked
11. 2d agoAtlantic CouncilBeyond the spy scandal: What the Nvidia-Megaspeed case reveals about export controlsAtlantic Council analysis argues the Nvidia–Megaspeed case exposes weak export-control enforcement and urges Congress and agencies to act on chip location verification, remote access rules, oversight, and counterintelligence.1 outletAICongress presses Nvidia and Commerce over Megaspeed chips and China ties42 linked
12. 2d agoThe RegisterMicrosoft outage gives customers a crash course in dependence on RedmondA prolonged Microsoft 365 outage in November 2026 knocked out Exchange Online, Teams and Copilot, prompting critics to renew warnings about dependence on a single vendor.1 outletMicrosoft 365 outage lasts about 24 hours, renewing dependence concerns15 linked
13. 2d agoTechTargetMicrosoft CISO urges Artex regulation, but experts say it won’t workMicrosoft's global CISO Igor Tsyganskiy urged policymakers to regulate release and use of Artex, an open-source LLM-driven pen testing framework, while security experts argue regulation would hamper defenders without curbing criminal use.1 outletCyberAI21 linked
14. N2d agoN-ableNew Security Update on N-centralN-able urges on-premises N-central customers to install the 2026.4 HF2 security hotfix quickly and keep servers offline until done, while disputing a researcher's claim of ignored responsible disclosure.

    2 articles

    1. 3d agoN-ableEarliestUpdate on N-central 2026.4 HF2 and ongoing security response
    2. 2d agoN-ableNew Security Update on N-central

    CyberN-able N-central zero-days exploited after researcher publishes exploit code23 linked
15. 3d agoThe RecordConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsConnectWise is probing ScreenConnect breaches at nearly 50 organizations, tying the activity to the abuse of a third-party RMM+ extension and disabling it across roughly 400 customer environments.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers9 linked
16. 4d agoCybersecurity DiveN-able issues hotfix after researcher dumps PoCs in disclosure spatN-able shipped a hotfix for critical flaws in its RMM platform after an independent researcher released proof-of-concept exploits in a disclosure dispute, and it briefly took the platform offline.

    2 articles

    1. 4d agoCybersecurity DiveEarliestN-able issues hotfix after researcher dumps PoCs in disclosure spat
    2. 4d agoDark ReadingPickupN-able Takes N-central Platform Offline After Discovery of 33 Flaws

    CyberN-able N-central zero-days exploited after researcher publishes exploit code24 linked
17. 5d agoBleepingComputer · research by Sean BalesN-able takes cloud platform offline after 30+ "zero-days" publishedAfter a researcher published over 30 alleged N-central zero-days with exploit code, N-able took its hosted N-central environments offline and told on-premises customers to shut their servers down while it develops a hotfix.

    4 articles · 3 outlets · TechCrunch

    1. 5d agoBleepingComputerEarliestN-able takes cloud platform offline after 30+ "zero-days" published
    2. 5d agoTechCrunchPickupN-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
    3. 4d agoCSO OnlinePickupN-able N-central gets emergency fix two days after 33 exploits published
    4. 4d agoBleepingComputerN-able releases security hotfixes for zero-day vulnerabilities

    CyberN-able N-central zero-days exploited after researcher publishes exploit code50 linked
18. 3d agoPalo Alto Unit 42 · research by Unit 42ARTEX and AI-Powered Red Teaming Tools: What Defenders Need to KnowUnit 42 reports that attackers are using the AI-powered red-teaming framework ARTEX, alongside CyberStrikeAI, to run autonomous intrusions that reach cloud environments through exposed APIs and password reset flows without exploiting software vulnerabilities.1 outletCyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks11 linked
19. B3d agoBleepingComputerActive ScreenConnect attacks breach MSPs, impact dozens of organizationsConnectWise is investigating an active malware campaign that abuses compromised ScreenConnect environments at managed service providers to push rogue remote-access clients onto customer devices.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers6 linked
20. 4d agoDark ReadingArtex: The AI Pen-Test Tool Hackers Turned Into a WeaponDark Reading reports that forks of the open-source Artex AI pen-testing framework, plus 45 similar tools, can still be used to run credential attacks and cloud breaches at machine speed.1 outletCyber9 linked
21. 6d agoCybersecurity DiveFinancially motivated threat cluster uses AI-enabled tools against banking sectorMicrosoft Threat Intelligence reports a Cambodia-based financially motivated group, Storm 3358, is using the AI-enabled Artex pen-testing framework against banking and financial firms worldwide, part of a broader wave of Artex-driven attacks.1 outletCyber11 linked
22. 9d agoCybersecurity DiveHackers enlist Artex to scan GitHub repositories for exposed secretsMicrosoft Threat Intelligence reports that hackers are using agentic AI tools such as Artex to hunt exposed GitHub secrets and abuse stolen credentials against downstream Azure and Microsoft 365 tenants.1 outletCyber12 linked
23. 9d agoCensysARTEX: Agentic AsbestosCensys finds ARTEX, a GitHub-published agentic AI attack tool, running on roughly 1,465 hosts, with exposed operator directories revealing malicious tooling tied to recent intrusions.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks13 linked
24. 9d agoAxiosHow AI is enabling faster, more dangerous cyber warfareAxios reports that AI and automation are accelerating state-backed cyberattacks, citing CrowdStrike's findings on the China-linked Vapor Panda campaign using the Artex tool and the suspected Russia-linked refrigeration sabotage across European grocery stores.1 outletCyberAI31 linked
25. 10d agoAxiosTech giants turn to cash, concessions for AI rebrand after voters pummeled data centers 43-1Tech companies including OpenAI, Amazon, Google and Microsoft are offering community payments and concessions to win back public support for data centers after voters backed restrictions in 43 of 44 ballot measures.1 outletAIVoters back data center limits in 2026 elections; Hawley seeks national moratorium21 linked
26. 11d agoCybersecurity DiveAttacker abuses Microsoft Entra ID to target downstream MSP clientsA lone hacker is abusing stolen Microsoft Entra ID application secrets to breach Microsoft 365 and Azure tenants at MSPs and their downstream clients, according to Todyl's report.1 outletCyber6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.