Zero Radar
← feed
HighSecurity incidentupdated 27 Oct 2026, 18:56 UTC

AI-driven hacking tool used in attacks on Japanese organizations

Attackers used AI software to automate parts of breaking into organizations in Japan. The AI helped run the attacks faster, with less manual work by the attacker.

Attacks reported (The Hacker News)1 source, unconfirmed
SeverityHighSecurity incident
Being exploited?ReportedBy The Hacker News, not officially confirmed yet
What to doCheck exposureFind and reduce your internet-exposed systems, then patch and monitor them closely.
How sure is this?1 source, unconfirmedOnly one publisher so far, details may change

How the attack works simplified

  1. 1Operator sets goalAttacker directs the attack campaign
  2. 2AI agents coordinateReportedly 44 agents automate hacking tasks
  3. 3Scan exposed targetsAutomated probing of internet-facing systems
  4. 4Access organization serversTargets in Japan were compromised
  5. ResultAttackers gain automated access to victim systems

What happened

Researchers at TrendAI analyzed three exposed server environments used to run AI-assisted cyber attacks against organizations in Japan. The tooling, called CyberStrikeAI, reportedly coordinates 44 AI agents to automate hacking operations.

Why it is dangerous: Automated AI-driven attacks can scan, probe, and exploit systems at a much higher pace than manual attacks, raising risk for organizations with internet-facing servers, especially those in Japan.

Are you affected?

You are affected if your organization runs internet-exposed servers or services that could be targeted by automated, AI-assisted attack tooling, particularly if you operate in Japan.

What to do

  1. Inventory internet-facing servers and services and remove any that are not needed
  2. Apply pending security updates promptly on all exposed systems
  3. Monitor logs for unusual, rapid, or automated scanning and login attempts
  4. Review access controls and enforce multi-factor authentication on remote access

Timeline

  1. 27 Oct 2026, 18:26 UTC
    Publicly disclosed
  2. 27 Oct 2026, 18:26 UTC
    Reported by The Hacker News · The Hacker News
  3. 27 Oct 2026, 18:56 UTC
    Picked up by Zero Radar

Sources 1 report, oldest first

Security press established security newsrooms

Technical details

ID
ZR-d09366a9
Disclosed
27 Oct 2026, 18:26 UTC
On Zero Radar
27 Oct 2026, 18:56 UTC (30 min after disclosure)
Last change
27 Oct 2026, 18:56 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

AI-driven hacking tool used in attacks on Japanese organizations · Zero Radar