Agentic Ai

South Korea – October 12, 2026 -- CrowdStrike Intelligence has linked a late-September to early-October 2026 campaign against South Korean financial organizations, which resulted in exfiltrated data, to attacker servers that exposed Claude Code session histories, ARTEX configuration files and Claude memory files.

The actor used ARTEX, a recently released open-source agentic penetration testing tool developed in China, alongside large language models (LLMs). CrowdStrike assesses with moderate confidence that the actor is a Chinese speaker and financially motivated, based on the tool choice and Chinese-language prompts. The activity has not been attributed to a named adversary.

San Jose – October 09, 2026 -- PUFsecurity, a subsidiary of eMemory Technology, argues that the security of AI agents ultimately rests on hardware Roots of Trust in the chips that run them, as agents gain delegated credentials and act without user review.

Agents that act on their own output raise the cost of compromise

Unlike a chatbot, an agent runs persistently, holds delegated credentials, browses the web, executes code and calls connected services. PUFsecurity says a misled chatbot yields a bad answer a person can still catch, while a misled agent can act with the user's credentials before anyone checks.