Between January 20 and 26, the Group Cymru researchers noticed 21 distinctive IP addresses working CyberStrikeAI, with servers primarily hosted in China, Singapore, and Hong Kong. This means a “sharp improve in operational utilization” for the reason that GitHub repository was created in November 2025, Group Cymru’s Thomas famous.
“As adversaries more and more embrace AI-native orchestration engines, we anticipate to see an increase in automated, AI-driven focusing on of weak edge gadgets,” together with firewalls and VPN home equipment, he warned.
Within the close to future, defenders should put together for an surroundings the place instruments like this, and different “AI-assisted privilege escalation tasks,” decrease the barrier to entry for advanced community exploitation, he cautioned.
