[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← AI · markdown

vendor research (Arctic Wolf Labs pack alert, Nov 10, 2026)

Attackers run AntiFox, an open-source AI pentesting agent, from Alibaba Cloud to go from IIS web shells to AWS production secrets

  • Why it matters: Arctic Wolf says agentic frameworks make pentest techniques more accessible to attackers and apply them faster and more consistently. AntiFox joins ARTEX-style tools already seen in the wild.
  • Hunt: AWS API calls from hosting ASNs new to an identity; one IP using several access keys or roles in a short window; fast List/Get/Describe sweeps across unrelated services from Boto3/Botocore (don't assume failure because most were denied); w3wp.exe spawning cmd, powershell, whoami, icacls; new .aspx files in upload or temp folders; PowerShell using WebConfigurationManager or ConnectionStrings.
  • Indicators: 47.79.4[.]33, 8.208.101[.]210; console title 'AntiFox — 自主渗透测试控制台'. Arctic Wolf notes cloud IPs may be reassigned.
  • Fix: alert on GetSecretValue from novel infrastructure, enable CloudTrail and S3 data events with versioning, enforce IMDSv2, rotate anything stored in web.config, and cut broad List permissions from app identities.

Sources: Arctic Wolf Labs pack alert: AntiFox agentic pentesting platform used to steal AWS credentials (Nov 10, 2026) · Arctic Wolf on X (Nov 10, 2026)