Back to Feed
Threat IntelligenceOct 29, 2026

The Rise of Agentic Attacks: What They Look Like, and Where They're Headed

AI agents are increasingly used in cyberattacks, automating reconnaissance and exploitation.

AI agents are becoming a significant tool for threat actors, automating complex attack phases like reconnaissance, lateral movement, and data exfiltration at machine speed. Frameworks like ARTEX and Hermes are being employed in real-world attacks, including supply chain compromises and targeting financial institutions. While these agentic attacks can be noisy, defenders face the challenge of distinguishing malicious automation from legitimate activity.

AI summary of the linked source. Not reviewed by an editor. How this works

Vendor Watch

Run Microsoft?

Get an email when a new story names Microsoft, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy

The lesson from this incident

Full lesson

Threat actors are leveraging AI agent frameworks like ARTEX and Hermes to automate complex, multi-stage attacks — including reconnaissance, lateral movement, and data exfiltration — at speeds no human operator could match. This means defenders have far less time to detect and respond before significant damage is done. The challenge is compounded by the fact that agentic attack traffic can closely resemble legitimate automation, making traditional detection heuristics less reliable. The supply chain vector adds another layer of risk, as trusted software pipelines become entry points for AI-driven compromise. Organizations that lack behavioral baselining and mature monitoring capabilities are especially exposed.

What helps against this

How we list vendors

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

  • malware — ARTEX
  • malware — Hermes
  • malware — Storm-0940

Entities

AI agents (technology)ARTEX (product)Hermes (product)Storm-0940 (threat_actor)Microsoft (vendor)Zscaler (vendor)