Analysis of the Infrastructure of ARTEX, a Chinese AI Penetration Testing Tool #4 – The Birth of Copy Cat
Key Summary Since the original ARTEX GitHub repository disappeared, there has been an increase in independent distributions and customized instances based on the existing ARTEX codebase. These distributions are being redistributed with the product name, UI, filesystem structure, agent settings, and language modified, while retaining traces of ARTEX. Key Observations
Palo Alto Networks Product Security Update Advisory (CVE-2026-0322)
A security update addressing a vulnerability in Palo Alto Networks products has been released. The affected vulnerability is CVE-2026-0322, a post-authentication remote code execution (RCE) vulnerability (a vulnerability that allows a threat actor to execute code remotely) in the PAN-OS management interface. Affected products include various versions of PAN-OS; specific
GitLab Product Security Update Advisory
A security update has been released to address several vulnerabilities in GitLab products. The affected products are GitLab CE/EE and GitLab AI Gateway. The vulnerabilities in GitLab CE/EE include the following: CVE-2026-14814: Insufficient regular expression validation vulnerability. CVE-2026-16301: Inappropriate authorization vulnerability. CVE-2026-92883: XSS vulnerability (a vulnerability where malicious scripts are
Cisco Product Security Update Advisory (CVE-2026-76519)
Overview Cisco has released a security update to address a vulnerability in its products. This report addresses a pre-authentication arbitrary file write vulnerability (CVE-2026-76519) in the Cisco Secure Email Gateway. Affected Systems Cisco Secure Email Gateway versions prior to 15.5.5-014. All versions in the Cisco Secure Email Gateway 16.0 Series.
Ahsay Product Security Update Advisory
A security update has been released to address vulnerabilities discovered in Ahsay products. The affected products are AhsayCBS versions 10.3.2 And earlier. The identified vulnerabilities are an authentication bypass (CVE-2026-105133) and an operating system command injection (CVE-2026-105134) in AhsayCBS. The operating system command injection vulnerability allows a threat actor to
The Threat of AI-Driven Autonomous Penetration Testing, as Examined by ARTEX
Overview AI is being used for various tasks that were previously performed manually, such as research, document writing, and code analysis. A 2026 corporate survey also showed that the scope of AI adoption among organizations had expanded compared to the previous year. Recently, there has been a trend toward automating
An Analysis of Suo5-Based Tunneling and Pivoting Attack Techniques Through Case Studies
Overview. This report summarizes cases in which Suo5 (an HTTP/HTTPS-based tunneling tool) was exploited for pivoting—a technique used to expand the scope of an attack to other systems or networks by passing through a system that has already been compromised—by using compromised web servers as relay points to access internal
October 14, 2026
October 14, 2026 Hash 1cc9b3280d84bd9367f39ec36fd936869 2a033fc197e192f5de8c5b2bb86e88d0a 3319b67a89f954c3970255682b25ea36e URL 1https[:]//azcaycanh[.]com/cdn-cgi/challenge-platform/scripts/jsd/main[.]js 2http[:]//argentinese[.]medianewsonline[.]com/ 3http[:]//657qp[.]com/ IP 1193[.]32[.]162[.]84 2191[.]96[.]196[.]91 3202[.]165[.]26[.]170...
Ransom & Dark Web Issues Week 3, October 2026
ASEC Blog publishes Ransom & Dark Web Issues Week 3, October 2026 n0n Ransomware Attacks on 12 South Korean Port and Logistics Companies Cyberattack Targets Refrigeration Systems at Major French Supermarket Chains Payment and Transaction Data Leak Claimed at a Saudi Fintech Company
Case of AgentTesla Malware Distribution Disguised as a Business Proposal Email
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified instances of phishing emails being circulated that disguise themselves as requests to review a business proposal. The email body asks recipients to review the attached product list and reply with their feedback on inventory and pricing, thereby prompting users to download and
