
ARTEX AI: The Pentest Tool That Hit Korean Banks
An open-source Chinese AI pentest tool was used to breach at least seven South Korean banks. The attacker's own Claude Code logs gave them away.
> booting the archive…
we use a small set of cookies. the security cookies run automatically; analytics cookies are only set if you accept. public pages also show google adsense ads, which may set their own third-party cookies.
> booting the archive…

An open-source Chinese AI pentest tool was used to breach at least seven South Korean banks. The attacker's own Claude Code logs gave them away.

Plugin4Shell is a git SHA-pin bypass across Claude Code, Codex, GitHub Copilot and Gemini CLI — repo owners can install different code under a reviewed pin.

Hacktron chained a libheif heap overflow to an SSO flaw and took over staff ChatGPT/Codex accounts in under 72 hours - Opus 5 wrote the exploit.

Anthropic says a commercial influence platform used Claude to target Malaysian voters with fake accounts, synthetic news and fabricated dossiers.

Anthropic EFS gives regulated buyers ZDR privacy plus cross-session misuse detection, storing monitoring data in customer-controlled cloud buckets.

Claude Fable 5.1 doubles down on long agentic work — 52.6% on Terminal-Bench-Science — and cache reads drop 75%. Mythos 5.1: same model, looser guardrails.

Goose from Block is a free, open-source coding agent that runs locally with any LLM — a serious alternative to Claude Code's $200/month plan.