South Korean Banks Hit by an Autonomous AI Pentesting Agent, and CrowdStrike Found It Because the Operator Left the Sessions Open

The discovery of an open directory at a Hong Kong-based IP address provided the first concrete evidence of a new class of cyber threat: the use of an autonomous AI pentesting agent in a live financial-sector intrusion. CrowdStrike…