Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA is using the ARTEX agentic AI framework and DeepSeek LLM to conduct simultaneous global espionage against foreign ministries and critical infrastructure sectors.

avatar
ills3c Intel&Coffee@Ills3C2 days ago

2 intel reports

CVE-2026-33824 Windows IKE Extension Pre-Auth RCE

A Chinese-speaking threat actor is manually exploiting CVE-2026-33824, a critical double-free vulnerability in the Windows IKE Extension, to achieve pre-authentication remote code execution on VPN gateways.

avatar
Tim Peck@timpeck
3 months ago
23
Hermes Agent AI-Enabled Autonomous Attack Campaign

Chinese-speaking threat actor knaithe utilizes the Hermes Agent framework and DeepSeek LLM to orchestrate autonomous vulnerability research, target enumeration, and exploitation attempts against global infrastructure.

avatar
Duo Tech@duotech
4 months ago
42