---
format: "aidr-story-markdown/v1"
id: "890a38eb97889328d74e673eaaabb1ddcbbdca49e4eb45fe7d66efc051d619a2"
canonical_url: "https://aidr.today/890a38eb?lang=en"
title: "Chinese AI Hacking Campaign Compromises 140 Global Organizations in 11 Days"
lang: "en"
requested_lang: "en"
available_langs: ["en","vi"]
translation_fallback: null
fallback_fields: []
published_at: "2026-11-02T13:23:19.000Z"
category: "Agents"
topics: ["deepseek","agent"]
source_urls: ["https://marketbrief.now/cybersecurity/chinese-ai-hacking-campaign-compromises-140-global-organizations-in-11-d-694b64cb","https://x.com/Techmeme/status/2116017892307407311","https://x.com/CyberScoopNews/status/2116997707269046603","https://x.com/CyberScoopNews/status/2117240562986168563","https://x.com/saranormous/status/2113108378486813036","https://x.com/martin_casado/status/2113117450065887657","https://x.com/rohanpaul_ai/status/2113113477552169349","https://x.com/MilkRoadAI/status/2116784308258316363"]
summary: "A China-linked hacking group known as Vapor Panda used artificial intelligence to target more than 200 organizations in 14 countries over an 11 day period. The campaign compromised about 140 targets, including 19 U.S. entities in sectors such as nuclear, defense, semiconductor, pharmaceutical, and financial. Attackers used the ARTEX agentic AI framework and DeepSeek large language models to automate intrusion, increasing speed from 40 to more than 1,500 commands per hour. The activity followed a supply chain breach of ConnectWise Cloud Backup."
---

# Chinese AI Hacking Campaign Compromises 140 Global Organizations in 11 Days

> [Open the canonical story](<https://aidr.today/890a38eb?lang=en>)

**Published:** 2026-11-02T13:23:19.000Z
**Category:** Agents
**Topics:** deepseek, agent

## Summary

A China\-linked hacking group known as Vapor Panda used artificial intelligence to target more than 200 organizations in 14 countries over an 11 day period\. The campaign compromised about 140 targets, including 19 U\.S\. entities in sectors such as nuclear, defense, semiconductor, pharmaceutical, and financial\. Attackers used the ARTEX agentic AI framework and DeepSeek large language models to automate intrusion, increasing speed from 40 to more than 1,500 commands per hour\. The activity followed a supply chain breach of ConnectWise Cloud Backup\.

## Sources

- [Story source](<https://marketbrief.now/cybersecurity/chinese-ai-hacking-campaign-compromises-140-global-organizations-in-11-d-694b64cb>)
- [Story source](<https://x.com/Techmeme/status/2116017892307407311>)
- [Story source](<https://x.com/CyberScoopNews/status/2116997707269046603>)
- [Supporting source](<https://x.com/CyberScoopNews/status/2117240562986168563>)
- [Supporting source](<https://x.com/saranormous/status/2113108378486813036>)
- [Supporting source](<https://x.com/martin_casado/status/2113117450065887657>)
- [Supporting source](<https://x.com/rohanpaul_ai/status/2113113477552169349>)
- [Supporting source](<https://x.com/MilkRoadAI/status/2116784308258316363>)