Tool
Hexstrike
- First Reported
- Oct 30, 2026
- Latest Reported
- Nov 2, 2026
Reported Context (2)
- threat actors' abuse of open-source agentic penetration testing frameworks like ARTEX, PentAGI, Hexstrike, and CAIRN to carry out a "broad range of actions" across various stages of the attack life cycle at an CL-UNK-1211 Targets Government Linux Servers With SysGoRAT and Suspected AI-Generated Scripts
- have observed multiple threat actors abusing the open-source, agentic pentesting frameworks ARTEX, Hexstrike and CAIRN in incident response engagements to conduct a broad range of actions across multiple phases of Mandiant Observes Threat Actors Using ARTEX and Other Agentic Attack Frameworks
Malware (3)
People (2)
Threat Actors (3)
MITRE ATT&CK (17)
Vendors (5)
Products (8)
Tools (11)
Industries (10)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.