Cybersecurity · The Cover Story
CrowdStrike's OverWatch team says a single operator, supervising AI agents, ran intrusions against more than 200 organizations in 11 days — and confirmed breaches at nine. The scarce resource in a cyberattack used to be attackers. It no longer is.
THE BUYER'S PULSE · FORTNIGHT EDITION · OCTOBER 26 – NOVEMBER 3, 2026
The tool of the campaign, in hand: DeepSeek — the Chinese model that powered VAPOR PANDA's agents — against the flag of the country the actor answers to. The recovered operator transcripts were in Chinese, timestamped in Beijing time.
The first consequence lands on your calendar, not your firewall: when one person can attack 200 organizations at once, the window between "detected" and "too late" shrinks from days to minutes.
On October 29, CrowdStrike's OverWatch threat-hunting team reported that the China-nexus actor it tracks as VAPOR PANDA used ARTEX — an open-source agent framework — to run parallel intrusions starting October 17. The agents ran mainly on DeepSeek models, plus a second, unconfirmed commercial model. Targets in at least 14 countries included foreign ministries and telecom organizations; the 19 U.S. organizations hit were in pharmaceuticals, semiconductors, defense, nuclear and finance.
For a manager, the plot is not espionage. It is arithmetic. Attack capacity no longer scales with headcount, salaries or shifts — it scales with compute. Every planning assumption built on "they can't come for everyone at once" expired this month.
In one intrusion, the planning agents consumed about 1.4 billion input tokens — a number worth pausing on. This was not a script running faster keystrokes. The framework planned, adapted and parallelized the work while the operator supervised. At nine organizations, the campaign reached post-exploitation and deployed the BLOODALCHEMY backdoor: the stage where data starts moving and dwell time starts costing money.
That division of labor — machine plans, human approves — is exactly how your own company is being sold AI for the office. This campaign is the same architecture, pointed the other way.
Three operational facts follow. First, coverage gaps are now the attack surface: an agent swarm does not get tired, skip the forgotten server, or move on because a target looks uninteresting — it tests everything, in parallel, at machine patience. Second, stale credentials and old API keys are standing invitations that can be tried thousands of times while your team sleeps. Third, response is a race you staff for today in hours and will be run against you in minutes.
None of this requires a bigger security budget to start fixing. It requires knowing, precisely, what is exposed — and most organizations cannot answer that question today.
Put one question to your security lead and require a dated answer: "Show me the coverage map and the key inventory." If the map has blanks, closing them outranks any new tool purchase — the VAPOR PANDA campaign did not beat anyone's best defenses; it walked through the doors nobody was watching.
Sources: CrowdStrike (primary), October 29, 2026 — OverWatch report on VAPOR PANDA / ARTEX; CyberScoop, October 29–30, 2026. Photo: DeepSeek app in hand, against the flag of China — via Journal of Democracy. Real photo, no filters. Figures re-verified against the primary source for this edition.
THE BUYER’S PULSE is independent and free. If this coverage helps you do your job, you can help keep it publishing with a voluntary contribution — one-time or monthly, in the amount you choose.
Buy me a coffee · $3 →Support never influences our coverage and buys no access. Contributions are not tax-deductible donations — they go directly to keeping this magazine independent.