Cybersecurity researchers have identified three separate cyber attacks targeting Japanese organizations that utilized artificial intelligence as a central component. The first attack employed CyberStrikeAI, an open-source penetration testing tool, which coordinated 44 agents to automate various stages of the assault, including reconnaissance, vulnerability discovery, exploitation, and data theft. During a concentrated period in October 2026, this automated system targeted at least 19 organizations, with 16 based in Japan, generating standardized reports in the Japanese language. The attack workflow demonstrated a highly structured, repeatable process rather than ad hoc operations conducted by individual operators.
The second and third attacks showed varying levels of AI involvement, ranging from human operators assisted by large language models to cases where AI played only a limited role in tool development. Analysis revealed that threat actors are using AI to significantly accelerate attack timelines, reduce required expertise, and increase operational scale. Recent findings indicate AI has compressed the median time from vulnerability discovery to weaponization to under 24 hours, fundamentally changing the threat landscape by enabling attackers to attempt thousands of intrusion attempts simultaneously while adapting to target locations and languages.
Source: Read the full story at The Hacker News
This summary was written with AI assistance from the linked source.
Send this to yourself, or to someone who should see it
Enter your email and we will send you a link to this article.
