2026-10-09 AI 与数据工作流雷达
来源：The Hacker News。这里只保留与 AI 编程、数据/研究工作流、安全边界或可信工程直接相关的高信号线索；不抓取全文，也不代表事实核验或产品推荐。
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
主题：AI 与数据安全
来源日期：2026-10-08
相关性分数：3
候选状态：待评估
为什么值得看：命中与临床统计、研究工程或可信 AI 工作流直接相关的高信号主题；仍需阅读全文并回到官方文档、原始研究或供应商公告交叉核验。
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity , per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration from various South Korea-based financial firms , including Shinhan Bank and Yegaram Savings Bank. “In this activity, the threat actor leveraged ARTEX, a recently released open-source agentic penetration testing (pentesting) tool developed in China, alongside large language models (LLMs),” the cybersecurity company said . CrowdStrike said it discovered the campaign after it identified a set of open directories hosted at a Hong Kong-based IP address, exposing Claude Code session histories, Claude memory files, and ARTEX configuration files. The campaign has not been attributed to any known threat actor or group. But evidenc…
可转化方向：评估 AI 辅助研究和编程中的隐私、凭据、供应链与安全边界
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
主题：AI 与数据安全
来源日期：2026-10-08
相关性分数：3
候选状态：待评估
为什么值得看：命中与临床统计、研究工程或可信 AI 工作流直接相关的高信号主题；仍需阅读全文并回到官方文档、原始研究或供应商公告交叉核验。
The npm package known as “ tensorlake ,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 “contains obfuscated malware that harvests credentials, exfiltrates secrets, establishes persistence, and executes remotely supplied code,” Socket said . Version 0.5.144 is no longer available for download from the npm package registry. An analysis of the compromised release shows that it contains a preinstall hook designed to launch a JavaScript file (“package/lib/setup.mjs”), an obfuscated loader that launches the main credential-stealing and self-propagating worm (“package/lib/Math_Symbol.js”) using the Bun runtime. The stealer malware is designed to harvest credentials across local files, CI environments, Kubernetes, and Vault sources. It also drops the HackBrowserData binary, exfiltrate…
可转化方向：评估 AI 辅助研究和编程中的隐私、凭据、供应链与安全边界