Latest
  1. Google releases Gemini Decision 1, a model that scores up to 1,000 questions in one pass
  2. Google DeepMind releases AlphaGenome 2 to predict DNA variant effects in human cell types
  3. Torus raises $500m to run AI computing on spare grid power
  4. Cyprus approves National AI Strategy 2032, leaving funding to a later plan
  5. Meta and TikTok join Google in opposing Indonesia’s AI copyright bill
  6. UK’s Sovereign AI fund backs chip firm Fractile in a £500m-plus round
  7. Russia, China and US discuss curbs on AI in nuclear arsenals, report says
  8. CloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents

Latest / Media, elections and online safety

IncidentMediaInternationalConfirmed

Arctic Wolf links AntiFox AI pentest tool to intrusions that read an AWS production secret

See how this story connects

Source: Arctic Wolf LabsAlso reported by The Hacker News

Arctic Wolf Labs reported on 10 November that self-hosted instances of AntiFox, an open source Chinese-language agentic penetration testing platform, were linked to intrusions that used valid IAM users and an assumed EC2 role to enumerate dozens of AWS services and reach a production secret through GetSecretValue. In one intrusion the source cycled through multiple AWS identities and sent hundreds of cross-service API requests in about half an hour, and a separate case used a valid AWS identity for S3 object reads, copies and deletes. Arctic Wolf also reports an IIS compromise in which w3wp.exe created an ASPX web shell and ran commands that read web.config connection strings.

Why it matters

Arctic Wolf advises organisations running internet-facing web applications or AWS workloads to rotate exposed credentials, enforce IMDSv2 and limit broad listing permissions, because agentic frameworks increase the speed and consistency of these attacks.

When
10 Nov 2026
ID
WTA-N-2026-0852
Who
Arctic Wolf

Summary written with AI by wheresthe.ai, from Arctic Wolf Labs and the reporting credited above. Checked against the source on 11 Nov 2026.

Read the original at Arctic Wolf Labs

Source copy: saved on 11 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextCloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents

Cite this story

WTA-N-2026-0852: “Arctic Wolf links AntiFox AI pentest tool to intrusions that read an AWS production secret.” wheresthe.ai, 10 Nov 2026. https://wheresthe.ai/d/intl-arctic-wolf-links-antifox-ai-pentest-tool-to-intrusions-2026-11/ (source: Arctic Wolf Labs).

Spotted an error? Email [email protected].