Hackers Leveraged CyberStrikeAI Tool to Breach Fortinet FortiGate Devices

CyberStrikeAI is an open-source, AI-native offensive security platform (written in Go) that integrates 100+ tools and an orchestration engine; researchers observed multiple instances communicating with Fortinet FortiGate devices and identified at least 21 unique servers running the platform between January and February 2026. The developer (alias Ed1s0nZ) has prior tool projects and alleged connections to entities tied to the Chinese MSS, and the tool’s web dashboard and automation significantly lower the barrier for large-scale, AI-assisted network exploitation—prompting warnings to monitor IoCs and strengthen defenses.