{"data":{"id":"b71b6cff-88de-4a14-b07d-d983e44dd58d","title":"AntiFox AI Pentesting Platform Linked to Attacks That Accessed AWS Production Secrets","summary":"Arctic Wolf Labs reports that attackers have used AntiFox, an AI-driven autonomous penetration testing platform available on GitHub, in intrusions that stole AWS credentials and moved laterally. The activity chained web exploitation and ASPX web shell deployment through the IIS worker process (w3wp.exe) with AWS API enumeration, including Secrets Manager access, and the precise vulnerability used for code execution on the IIS server is not known.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/11/antifox-ai-pentesting-platform-linked.html","publishedAt":"2026-11-11T15:34:27.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AntiFox","AWS","Alibaba Cloud","Amazon Bedrock"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-11T15:34:27.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null}}