AntiFox AI Pentesting Platform Linked to Attacks That Stole AWS Production Secrets
Thionne_WTZ · x · 2026-11-12
Arctic Wolf Labs reports that AntiFox, an open-source agentic pentesting platform, has been used in real intrusions: attackers deployed IIS web shells, abused valid AWS credentials, and successfully pulled secrets from AWS Secrets Manager. AntiFox (474 stars, 251 forks on GitHub) runs a planner/worker/main-agent multi-agent system over a dual-graph core covering recon to report delivery. Some access activity involved Alibaba Cloud systems hosting AntiFox interfaces.
More from coding & agent
- Game dev workflow: AI-generated sprite sheets turned into character walk GIFs — algo_diver · 2026-11-12
- Agent reads email threads and pre-books your apartment viewing on Gcal automatically — braelyn_ai · 2026-11-12
- Alchemy + Effect hailed as a mindset shift for building software with agents — johnlindquist · 2026-11-12
- Dev builds npx driftcost CLI to check if Claude Code token usage silently shifted between Opus versions — Tough_Stay8909 · 2026-11-12
- Gemini 4 Carbon now usable in VS Code and Cursor via AFK Pilot extension — PawelHuryn · 2026-11-12
- DocQuery turns spreadsheets plus linked PDFs into a read-only MCP endpoint for Claude and Cursor — acrogenesis · 2026-11-12