Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries

Team Cymru and Amazon Threat Intelligence report an AI-augmented offensive campaign that used the open-source CyberStrikeAI platform to mass-scan and compromise Fortinet FortiGate devices (over 600 appliances across 55 countries). CyberStrikeAI, maintained by the developer Ed1s0nZ, integrates over 100 security tools to automate vulnerability discovery and exploitation; activity was observed from multiple IPs and servers worldwide, and the developer's GitHub interactions and tooling suggest possible ties to Chinese state-aligned actors, raising concerns about proliferation of AI-augmented offensive capabilities.