Hunt.io
CompanySecurity timeline
- Named in breach reports by Cyber Security NewsExposed ARTEX servers reveal AI tools used in South Korean financial data thefts
- Named in breach reports by GBHackersHackers chain PHP2Shell and Fragnesia flaws to gain root on Palo Alto firewalls
Recent news
Exposed ARTEX servers reveal AI tools used in South Korean financial data thefts
Researchers found that an operator behind the ARTEX open-source AI penetration testing framework left servers publicly accessible, exposing the models, scripts and proxies used in attacks on seven South Korean financial institutions between late September and early October 2026. Stolen data included names, jobs, income details and loan information for roughly 66,000 to 67,000 people and about 2,200 companies. CrowdStrike assessed with moderate confidence that a single Chinese-speaking, financially motivated operator was responsible.
Hackers chain PHP2Shell and Fragnesia flaws to gain root on Palo Alto firewalls
Attackers chained critical PHP2Shell remote code execution flaws with the Fragnesia Linux kernel flaw to gain root access on PAN-OS systems. The campaign reportedly compromised 24 internet-facing firewalls before reaching an internal firewall management server, bringing the total to 25 systems, according to Hunt.io's investigation citing Dream Research's analysis.