Hackers use ARTEX, PentAGI and CAIRN AI penetration testing frameworks to automate cyberattacks

Google Threat Intelligence Group and Mandiant reported that since late August 2026, attackers have abused three AI penetration-testing frameworks—ARTEX, PentAGI and CAIRN—in real intrusions, automating internal reconnaissance, database exploitation, lateral movement and preparation for data theft, with the findings published on October 30. These attacks still relied on stolen credentials, exposed management interfaces and overly broad permissions; the main change is speed, as automated agents can combine weaknesses and test multiple attack paths in seconds to minutes, and the report did not conclude that all attacks ran without human supervision. Among them, ARTEX is a Go-based attack platform whose author deleted the GitHub repository in October due to widespread abuse, but community forks are still circulating; the investigation observed its execution bursts lasting about 2 to 25 seconds, enumerating more than 110,000 Active Directory objects, and using valid Weaver OA credentials and MySQL logging functionality to deploy a JSP webshell.