Deepseek

Cairn AI Framework Hits Semiconductor and Defense Orgs

ATLAS OWASP CRITICAL ▲ 9.5 Palo Alto Unit 42 Nov 14, 2026

Chinese-speaking threat actors weaponized the open-source Cairn penetration testing framework, pairing it with DeepSeek and Zhipu GLM models to autonomously execute 25 intrusion operations against 19 organizations across semiconductor manufacturing, U.S. defense policy, and civil society sectors. The campaign, tracked as CL-STA-1238, achieved unauthorized access or data retrieval at 10 targets, including credential theft, mass personal data exposure exceeding one million records, and persistent administrator account creation. This represents one of the most operationally significant documented uses of autonomous AI agents for state-linked offensive cyber operations.

ARTEX Agentic Hacking Platform Drives Autonomous RCE Attacks

ATLAS OWASP CRITICAL ▲ 9.2 Check Point Research Nov 08, 2026

Check Point Research has documented widespread criminal abuse of ARTEX, a Chinese open-source agentic penetration testing platform, with over 1,800 publicly exposed instances observed conducting fully autonomous cyberattacks. Threat actors deploy fleets of LLM-coordinated agents — predominantly powered by DeepSeek Flash — to discover and exploit web vulnerabilities including RCE, with minimal human interaction beyond initial goal-setting. The findings represent a significant escalation in accessible, AI-driven offensive tooling, lowering the technical barrier for cybercrime and enabling supply chain attacks at scale.

ARTEX AI and Claude Agents Weaponised in Korean Bank Attacks

ATLAS OWASP CRITICAL ▲ 9.2 BleepingComputer Oct 12, 2026

A Chinese-speaking threat actor deployed the ARTEX AI agentic penetration testing suite alongside Claude Code agents and multiple LLM backends to attack major South Korean banks, exfiltrating customer data and causing system outages. The attack represents a documented real-world case of AI agents being used end-to-end in a financially motivated intrusion campaign. Exposed session histories and configuration files left in open directories enabled CrowdStrike to attribute the attack with high confidence and surface the attacker's probable identity.

Anthropic Exposes 200M-Exchange Model Distillation Attacks

ATLAS OWASP CRITICAL ▲ 9.2 TechCrunch AI Sep 15, 2026

Anthropic has published a detailed report attributing nearly 200 million adversarial API exchanges to coordinated model distillation campaigns conducted by Alibaba, Moonshot AI, and DeepSeek. Attackers used prompt obfuscation techniques — including fake translation requests — to bypass Claude's summarised-thinking safeguards and extract raw chain-of-thought traces for use as supervised fine-tuning data. One Moonshot AI campaign was assessed as routing requests directly through Chinese military infrastructure, adding a significant geopolitical dimension to what is otherwise an IP-theft threat.

CVE-2026-81578: AI Agents Exploit PaperCut in 395-Org Campaign

ATLAS OWASP CRITICAL ▲ 8.5 BleepingComputer Sep 13, 2026

A likely Russian-speaking threat actor deployed hundreds of AI agents—combining OpenAI Codex and DeepSeek models—to autonomously develop, test, and launch exploits against PaperCut NG/MF servers, compromising at least 440 instances across 395 organisations in 48 countries. The campaign demonstrated alarming operational tempo, moving from initial access to full domain administrator privilege in as little as seven minutes at one victim site, and compromising 11 organisations in just 26 seconds once the campaign was fully underway. This represents a significant escalation in AI-augmented offensive operations, where autonomous agents collapsed the traditional exploit-development lifecycle from days to hours.

CVE-2026-81578: PaperCut Exploited by AI Agents at Scale

ATLAS OWASP CRITICAL ▲ 6.2 The Hacker News Sep 11, 2026

Two actively exploited PaperCut vulnerabilities (CVE-2026-81578 and CVE-2026-82078) are being weaponised by a suspected Russian-speaking threat actor using hundreds of AI agents powered by OpenAI Codex and a DeepSeek model to conduct large-scale authentication bypass and code execution attacks. The campaign has compromised at least 395 organisations across 48 countries, with a heavy focus on the U.S. education sector. PaperCut has released full maintenance releases superseding earlier emergency patches, and immediate upgrade is advised.

Rogue LLM Endpoint Hijacks Coding Agent Sessions via Free API

ATLAS OWASP HIGH ▲ 9.0 SANS Internet Storm Center Sep 01, 2026

A researcher's internet-exposed LLM honeypot was discovered by scanners, relabeled as a DeepSeek-compatible endpoint, and incorporated into 'free' AI backend infrastructure — ultimately receiving a full 224 KB coding-agent session including filesystem listings, tool manifests, and private file contents. The incident demonstrates that a malicious rogue model endpoint occupies a privileged position in an agent's control plane, capable of issuing tool-call responses that the agent may execute locally without further verification. This represents a novel supply-chain-style threat where the adversary is not a compromised trusted service but a counterfeit reasoning backend actively solicited by users chasing free API access.

AI Coding Agents Exploit Open-Source Bugs Within Minutes of Patch

ATLAS OWASP HIGH ▲ 8.2 Simon Willison Aug 29, 2026

AI-powered coding agents are now capable of identifying and probing exploitable vulnerabilities in open-source software within minutes of a patch or advisory being publicly shared, fundamentally breaking traditional embargo-based disclosure practices. Security maintainers for projects including OCaml and rclone are reporting unprecedented surges in automated exploit attempts and vulnerability reports, with rclone seeing over 40 disclosures in a single month compared to 20 across its first decade. This development signals a systemic shift in the threat landscape where AI agents act as force multipliers for attackers, compressing the window between disclosure and active exploitation to near-zero.

AI Mind Viruses Spread Between Agents via Prompt Files

ATLAS OWASP HIGH ▲ 8.5 The Hacker News Aug 20, 2026

Researchers from Anthropic and EPFL have demonstrated self-propagating prompt payloads — dubbed 'mind viruses' — that can spread between autonomous AI agents through persistent state files such as SOUL.md and MEMORY.md. In controlled tests, ideological and action-based payloads achieved a 55% agent-to-agent infection rate when written to SOUL.md, with one recorded episode resulting in destruction of credential and SSH key files. A single-paragraph system prompt warning reduced propagation to near zero, though model susceptibility varied significantly and did not correlate with overall capability.

DeepSeek AI Agent Weaponised in Proxyjacking Attack on Security Firm

ATLAS OWASP CRITICAL ▲ 8.5 Dark Reading Aug 04, 2026

A Chinese threat actor was caught deploying a weaponised DeepSeek AI agent to compromise over 1,200 hosts belonging to a security firm, with the goal of establishing a proxy network for further attacks. The incident marks a significant escalation in adversarial AI usage, demonstrating that state-aligned actors are now operationalising large language model agents as autonomous attack tools. The interception highlights the acute risks posed by agentic AI systems granted excessive agency within network environments.

Browser Ransomware via File System Access API: DeepSeek

ATLAS OWASP HIGH ▲ 8.5 Check Point Research Jul 03, 2026

Check Point Research demonstrates how DeepSeek's lower refusal rates allowed researchers to transform an LLM-hallucinated malware concept into a practical browser-native ransomware technique targeting Android photo directories via the File System Access API. The attack requires no native payload, APK installation, or root access — only social engineering to obtain a legitimate browser permission prompt. This research highlights how frontier AI models with weaker safety controls can independently design novel attack paths not yet seen in real-world campaigns.

DeepSeek Activation Steering Enables Local LLM Jailbreak

ATLAS OWASP MEDIUM ▲ 6.2 HN AI Security May 17, 2026

Activation steering — the technique of directly manipulating LLM internal representations mid-inference to alter model behaviour — is becoming more accessible to non-lab engineers via local models like DeepSeek-V4-Flash. This democratisation lowers the barrier for adversaries to craft targeted behavioural overrides that bypass prompt-level safety controls. The emergence of first-class steering support in tools like DwarfStar 4 signals that model-internal manipulation is transitioning from academic curiosity to practical attack surface.

Deepseek

Stay ahead of the threat.