{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/intapp-time-server/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":["Vapor Panda"],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":true,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Intapp Time Server"],"_cs_severities":["high"],"_cs_tags":["cyber-espionage","artificial-intelligence","vapor-panda","artex"],"_cs_type":"threat","_cs_vendors":["Intapp"],"content_html":"\u003cp\u003eCrowdStrike has observed the threat actor Vapor Panda using a Go-based, AI-powered penetration testing framework called ARTEX to automate reconnaissance, vulnerability identification, and exploitation. The framework coordinates planner and worker agents to execute attack paths in parallel across web applications, cloud services, and Active Directory. Post-exploitation activities involve the deployment of BLOODALCHEMY, a ShadowPad derivative, followed by credential spraying and reconnaissance. Separately, the threat actor Titan Panda has been observed exploiting hard-coded machine keys in Intapp Time Server.\u003c/p\u003e\n","date_modified":"2026-10-30T18:48:44Z","date_published":"2026-10-30T18:48:44Z","id":"https://feed.craftedsignal.io/briefs/2026-10-vapor-panda-artex-247ffc7f/","summary":"Vapor Panda (formerly VexatiousTemper, overlapping with Earth Estries) is utilizing the AI-powered ARTEX framework to conduct large-scale, concurrent, multi-vector intrusions targeting over 200 global organizations, including foreign ministries, telecommunications, and defense sectors.","title":"Vapor Panda: Automated Cyber Espionage via ARTEX Framework","url":"https://feed.craftedsignal.io/briefs/2026-10-vapor-panda-artex-247ffc7f/"}],"language":"en","title":"CraftedSignal Threat Feed - Intapp Time Server","version":"https://jsonfeed.org/version/1.1"}