{"id":8973,"date":"2026-11-14T16:24:41","date_gmt":"2026-11-14T16:24:41","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret"},"modified":"2026-11-14T16:24:41","modified_gmt":"2026-11-14T16:24:41","slug":"antifox-agentic-pentest-platform-reached-live-aws-secret","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/antifox-agentic-pentest-platform-reached-live-aws-secret","title":{"rendered":"AntiFox agentic pentest platform reached live AWS secret in real intrusions"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Arctic Wolf Labs published an alert on November 10, 2026 linking AntiFox, an open-source Chinese-language agentic penetration testing platform, to real intrusions that successfully read a production AWS secret. The team found Alibaba Cloud systems running AntiFox web consoles connected to attacks on internet-facing web services and AWS accounts.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> AntiFox, an open-source agentic pentesting platform, was used in intrusions that read a production AWS secret<\/li><li><strong>Entry paths:<\/strong> A compromised IIS application with an ASPX web shell, or a valid AWS credential obtained by unknown means<\/li><li><strong>Attack pattern:<\/strong> Hundreds of cross-service AWS List, Get and Describe calls in about 30 minutes, rotating through several AWS identities<\/li><li><strong>Who is affected:<\/strong> Organizations running internet-facing IIS applications and AWS accounts that issue long-lived credentials<\/li><li><strong>What to do:<\/strong> Alert on successful GetSecretValue after a burst of denied calls, and on AWS API activity from hosting-provider networks never before tied to that identity<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers found that attackers used an AI-powered hacking tool called AntiFox to break into company systems and steal secrets stored in Amazon&#8217;s cloud. The attackers either broke into a web server first or already had stolen login credentials. Once inside, the tool automatically tried hundreds of different commands in about 30 minutes until it found and read a real password or key stored in AWS Secrets Manager. This is not a flaw in any AI product you use. If you are not a system administrator or developer managing web servers or AWS accounts, you do not need to do anything. If you do manage such systems, watch for unusual bursts of cloud API calls and rotate any credentials found in configuration files.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Arctic Wolf Labs published an alert on November 10, 2026 about intrusions it links to AntiFox, an open-source, Chinese-language agentic penetration testing platform. The team found Alibaba Cloud systems running AntiFox web consoles connected to attacks on internet-facing web services and on the AWS accounts behind them. Arctic Wolf names no victims.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Two entry paths appear in the alert. In one, a compromised IIS application let the w3wp.exe worker process write an ASPX web shell, which then read web.config files and connection strings and copied configuration and log files into a web-accessible upload directory. In the other, the operator already held a valid AWS credential and used it for List, Get and Describe calls across unrelated services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Arctic Wolf describes one source rotating through several AWS identities and making hundreds of cross-service requests in about 30 minutes. The successful GetSecretValue call used a customer identity rather than a flaw in an AWS service. Arctic Wolf does not identify the vulnerability behind the web compromise, and does not name the organizations involved.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Arctic Wolf advises alerting when one source address uses several access keys, IAM users or assumed roles in a short window, and on fast List, Get and Describe sequences across unrelated services from Boto3 or Botocore. The alert stresses not dismissing such a burst because most calls were denied, because successful calls sit between the denials.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alert on a successful GetSecretValue that follows a burst of denied calls, and on AWS API activity from hosting-provider networks never before tied to that identity. Arctic Wolf also advises watching for w3wp.exe spawning cmd.exe or powershell.exe, rotating credentials found in configuration files, deployment artifacts and debug logs, and enforcing IMDSv2 with least-privilege policies.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Exposure here sits with organizations running internet-facing IIS applications and AWS accounts that issue long-lived credentials, not with users of any AI product. Arctic Wolf did not identify the vulnerability behind the web compromise, and says the AWS credential in the second path was obtained by unknown means.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Arctic Wolf lists two source addresses, a web console on TCP\/8787, a banner hash, and the Boto3\/1.43.125 and Botocore\/1.43.125 user agents. On Windows hosts the alert names w3wp.exe spawning cmd.exe, powershell.exe or where.exe, along with new .aspx files and copied configuration and log text files in web-accessible upload directories.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/theinjection.dev\/items\/arctic-wolf-antifox-aws-secrets\/\" target=\"_blank\" rel=\"noreferrer noopener\">Arctic Wolf Alert<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Arctic Wolf Labs ties self-hosted AntiFox consoles on Alibaba Cloud to real intrusions: a web shell on an IIS server, then valid AWS keys sweeping services until one GetSecretValue call on a production secret succeeded.<\/p>\n","protected":false},"author":2,"featured_media":8972,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"high","_nx_sec_affected":"Organizations running internet-facing IIS applications and AWS accounts that issue long-lived credentials","_nx_sec_status":"actively-exploited","_nx_sec_kicker":"URGENT: AI pentest tool used in real attacks","_nx_sec_type":"ai-attacks","_nx_sec_vendor":"AntiFox","_nx_sec_fixed":"","_nx_sec_action":"Alert on GetSecretValue after denied calls and AWS API activity from new hosting networks"},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8973","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AntiFox pentest platform reached live AWS secret<\/title>\n<meta name=\"description\" content=\"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AntiFox pentest platform reached live AWS secret\" \/>\n<meta property=\"og:description\" content=\"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-14T16:24:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"AntiFox agentic pentest platform reached live AWS secret in real intrusions\",\"datePublished\":\"2026-11-14T16:24:41+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret\"},\"wordCount\":683,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-14T16:24:41+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret\",\"name\":\"AntiFox pentest platform reached live AWS secret\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp\",\"datePublished\":\"2026-11-14T16:24:41+00:00\",\"description\":\"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/antifox-agentic-pentest-platform-reached-live-aws-secret#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AntiFox agentic pentest platform reached live AWS secret in real intrusions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AntiFox pentest platform reached live AWS secret","description":"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret","og_locale":"en_US","og_type":"article","og_title":"AntiFox pentest platform reached live AWS secret","og_description":"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential","og_url":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret","og_site_name":"i10X News","article_published_time":"2026-11-14T16:24:41+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"AntiFox agentic pentest platform reached live AWS secret in real intrusions","datePublished":"2026-11-14T16:24:41+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret"},"wordCount":683,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-14T16:24:41+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret","url":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret","name":"AntiFox pentest platform reached live AWS secret","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp","datePublished":"2026-11-14T16:24:41+00:00","description":"Arctic Wolf Labs links AntiFox, an open-source agentic pentest platform, to real intrusions that read a production AWS secret via web shell and credential","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/antifox-agentic-pentest-platform-reached-live-aws-secret-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/antifox-agentic-pentest-platform-reached-live-aws-secret#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"AntiFox agentic pentest platform reached live AWS secret in real intrusions"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8973"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8973\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8972"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8973"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8973"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}