ARTEX AI Open-Source Pentest Tool Misused in Breaches and LLMjacking Cloud Attacks

·2 views

WorkOS confirmed a data breach in which an attacker used the open-source multi-agent penetration-testing framework ARTEX AI to access an internal sales application and steal customer communication summaries. Chinese hackers reportedly used the same framework in automated attacks on more than 200 organizations across 14 countries. A UK school estate was hit by a ransomware attack suspected, but not confirmed, to have been AI-assisted. Google has reported LLMjacking, where stolen cloud credentials or API keys are used to run costly AI models, has generated over $1 million in fraudulent charges, with some organizations losing more than $100,000 in a single day. Experts advise treating AI API keys with the same care as root cloud credentials and rotating them regularly.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

402Proof Adds x402 Pay-Per-Call Payments on XRP Ledger and Xahau

Script Master Labs has published a starter kit showing how APIs can accept per-call x402 payments in XRP or XAH on the XRP Ledger and Xahau. The kit routes payments through its 402Proof facilitator, which verifies and settles native Payment transactions on-chain. Access is partner-keyed, with keys issued to known sellers scoped to their wallet, origin, asset and amount limits. Fees differ by network: on XRPL a $0.01 per-settlement fee accrues to a merchant ledger with loyalty discounts, while on Xahau a flat 0.01 XAH fee is collected in a second payer-signed transaction. The company says 402Proof is currently the only Xahau x402 facilitator it could find, though the rail remains early.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Typeye Identifies Fonts From Photos Entirely On-Device

Typeye is a new app that identifies the font in a photo, whether captured with a camera or uploaded as an image. Unlike many font identifiers, it runs recognition locally using Core ML, so images never leave the user's phone. The app returns the exact font name or closest matches, along with free alternatives and links to obtain each typeface. It is aimed at designers, developers matching brand fonts, students, and anyone curious about typography, and it is available free at typeye.com without signup.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MapReduce: A Divide-and-Conquer Model for Processing Massive Datasets

The article explains MapReduce, a way of thinking about and processing datasets too large for a single machine. It likens the approach to splitting a huge library among many workers who each count occurrences of a word in their section. The Map phase emits intermediate key-value pairs from chunks of input in parallel, while the Reduce phase gathers and aggregates those pairs into final results. The piece notes that MapReduce is both a programming model and a distributed computing framework used across clusters of computers. It also outlines helpful background knowledge, such as key-value pairs and distributed file systems like HDFS.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Trading bot's $10 exposure cap failed after restart, letting $18.60 in orders through

A test of a trading bot's kill switch found that its $10 exposure limit was not enforced after a restart. Exposure was tracked as an in-memory counter that reset to zero on each launch, so the bot placed roughly $9.30 of orders again and ended with $18.60 of resting bids on a mock exchange. The fix reads open orders and positions from the venue at startup and before every loop. A daily-loss stop also passed its unit test but was never called by the live bot. The tests were run on October 25, 2026, against demo and mock exchanges with no real orders sent.

0 comments Read more at DEV Community