ThreatBook acquires CyberStrikeAI, an open-source AI pentesting agent

ThreatBook has acquired CyberStrikeAI, an open-source AI pentesting agent, after reports that attackers had used it in real intrusions.

The company says it added guardrails to limit misuse, but because the tool is open source, it acknowledges "there's only so much we can do." New capability enhancements will go into ThreatBook's commercial edition, and the company argues defenders should control such tools.

The acquisition also addresses an earlier threat intelligence report that linked the tool's developer, a security engineer at Alipay, to government agencies. ThreatBook calls that attribution a false positive and has issued a correction.