We share in-the-wild activity from ARTEX, an AI-native penetration framework, against AWS environments, including CloudWatch log hunting with compromised access keys and abuse of public Cognito user pools.
On the hunt for ARTEX: understanding agentic attacks in AWS environments
About this summary. This is a short excerpt from the description that Datadog Security Labs published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://securitylabs.datadoghq.com/articles/artex-agentic-attacks-aws-environments/
Source attribution: headline and facts are from Datadog Security Labs (securitylabs.datadoghq.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets
Cybersecurity researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web…
Hackers use AntiFox AI agents in AWS credential-theft attacks
Attackers are using Alibaba Cloud to host self-managed instances of AntiFox, an open-source agentic penetration testing platform, to target web services and AWS…
We Built An Agent That Broke All of Our Security Rules. Here's What We Learned.
We tell customers three things about securing AI agents: they need their own identities, access that fits the job they’re given, and traceability that’s separate from…
Bay Raises $50 Million to Control What Enterprise AI Agents Can Do
Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents.
Obsidian expands AI agent security with runtime policy enforcement
Obsidian Security has announced its Runtime Policy Decision Engine, giving security teams centralized control over AI agent actions before they run. Building on…
Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code
Google opened Carbon to paying developers and businesses as DeepMind used agents built on it to prove libsignal security guarantees.