Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches
2026-11-08T08:51:38Z•0b022bf7172fb37c99432264fc6be29e1c33eadfd610c5d23a008c8444a7ed61
CVE-2024-27834CVE-2026-19868AI securityAPT29AndroidCISA KEVCozy BearNobeliumSSL VPNSonicWall SonicOSSouth Koreaactive exploitationauthentication bypasscritical infrastructuredata breachfinancial sectorhealthcare disruptioniOSindustrial control systemsmobile securityoperational technologywatering hole
What happened
The feed reports active cyber threats across multiple sectors, including breaches of seven South Korean financial institutions through internet-facing systems, exploitation of a SonicWall SonicOS SSLVPN authentication-bypass flaw, APT29 watering-hole attacks against iOS and Android users, attacks on European refrigeration systems, and a healthcare disruption at UNM Health. It also highlights AI-assisted vulnerability discovery and reliability concerns. CISA added CVE-2026-19868 and CVE-2024-27834 to its Known Exploited Vulnerabilities catalog, indicating active exploitation and urgent patching
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 0b022bf7172fb37c99432264fc6be29e1c33eadfd610c5d23a008c8444a7ed61
- Enrichment time
- 2026-11-08T08:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.