cyberstrikeai

A practical defender's guide built on Unit 42's November 2026 findings: how to spot AI-driven red-team tooling like ARTEX by its behaviour, and which exposure and credential changes starve it.

Kaspersky describes attackers using the open-source CyberStrikeAI framework, where a server-side LLM plans post-exploitation. Victims included education organizations.