A Single Operator Used DeepSeek and Claude to Breach 600 FortiGate Firewalls in 5 Weeks
Amazon Threat Intelligence uncovered a Russian-speaking threat actor using DeepSeek for attack planning, Claude for autonomous exploitation, and a custom MCP server called ARXON to breach 600+ FortiGate devices across 55 countries.