VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign
VAPOR PANDA is using the ARTEX agentic AI framework and DeepSeek LLM to conduct simultaneous global espionage against foreign ministries and critical infrastructure sectors.

Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
Unauthenticated remote code execution vulnerabilities in Citrix NetScaler ADC and Gateway are being actively exploited in the wild to deploy webshells and steal credentials.
F5 BIG-IP APM is vulnerable to a critical unauthenticated remote code execution flaw (CVE-2026-94127) when configured as an OAuth Authorization Server, which is actively being exploited in the wild.
WordPress Core versions 4.7.0 through 7.1.1 are vulnerable to an unauthenticated path traversal flaw (CVE-2026-87902) that can lead to remote code execution under specific environmental conditions.