The Rise of Agentic Attacks: What They Look Like, and Where They're Headed
AI agents are increasingly used in cyberattacks, automating reconnaissance and exploitation.
AI agents are becoming a significant tool for threat actors, automating complex attack phases like reconnaissance, lateral movement, and data exfiltration at machine speed. Frameworks like ARTEX and Hermes are being employed in real-world attacks, including supply chain compromises and targeting financial institutions. While these agentic attacks can be noisy, defenders face the challenge of distinguishing malicious automation from legitimate activity.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Microsoft?
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThreat actors are leveraging AI agent frameworks like ARTEX and Hermes to automate complex, multi-stage attacks — including reconnaissance, lateral movement, and data exfiltration — at speeds no human operator could match. This means defenders have far less time to detect and respond before significant damage is done. The challenge is compounded by the fact that agentic attack traffic can closely resemble legitimate automation, making traditional detection heuristics less reliable. The supply chain vector adds another layer of risk, as trusted software pipelines become entry points for AI-driven compromise. Organizations that lack behavioral baselining and mature monitoring capabilities are especially exposed.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Network detection and response (NDR)
Attackers moving between systems inside the network get seen.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — ARTEX
- malware — Hermes
- malware — Storm-0940