Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors

Researchers report that Chinese-speaking attackers used an open-source AI penetration testing framework paired with Zhipu GLM and DeepSeek models to autonomously conduct 25 operations against at least 19 organizations between August and September 2026. The campaigns targeted advanced semiconductor manufacturers, U.S. defense policy organizations, and civil society groups, achieving unauthorized access or data retrieval at 10 of the targeted entities. Open article →