# CrowdStrike links AI agents to attacks on more than 200 organizations

_Published Monday, November 2, 2026 at 5:02 PM EST · Security, AI · Latest · Tier 1 — Major_

![CrowdStrike links AI agents to attacks on more than 200 organizations — Primary](https://www.bleepstatic.com/content/hl-images/2026/11/02/pandabot.jpg)

CrowdStrike researchers say a Chinese threat actor used the ARTEX AI penetration-testing framework against more than 200 organizations across 14 countries, compromising at least nine. The campaign began October 17 and targeted government, telecommunications, pharmaceutical, semiconductor, defense, nuclear and financial organizations.

The actor, tracked as Vapor Panda, used DeepSeek and another commercial language model to coordinate planning and worker agents across simultaneous intrusions. Agents conducted reconnaissance, exploited vulnerabilities, deployed web shells and obtained credentials. Human operators intervened at critical decisions and instructed agents to avoid Windows machines protected by CrowdStrike's Falcon software.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/)

---
Canonical: https://techandbusiness.org/newswire/cVHFLF8DlpDbXPsBfAB_lk
Published: 2026-11-02T22:02:45.843Z
Story chronology: 2026-11-02T21:40:14.000Z
Retrieved: 2026-11-03T00:47:54.394Z
Publisher: Tech & Business (techandbusiness.org)