Search
Found 3 articles
When AI Learns to Pentest: The ARTEX Case and the Rise of Agentic Attack Tooling
In October 2026, an open-source AI pentesting tool called ARTEX was linked to attacks on South Korean financial institutions — and within 48 hours its developer pulled the source and went closed-source. This article reconstructs the timeline, unpacks its technical positioning, and answers the more important question: how should defenders respond when attack tooling is driven by AI agents?
Insider Threat and Access Governance: The Hardest Attack Surface Is Inside
Insider threat is not simply "having a bad actor": it covers three distinct types — malicious, negligent, and coerced — each needing different countermeasures. This article breaks down their behavioural signatures and detection logic, and why access governance beats employee surveillance.
Supply Chain and Third-Party Risk: When Your Attack Surface Is Not in Your Own Building
Much of a modern enterprise's attack surface sits outside its own control: open-source packages, outsourced providers, cloud dependencies, SaaS tools. This article unpacks the risk mechanics of four supply-chain links, shows how attackers borrow a path in, and includes a third-party risk checklist you can use directly.