InfoSecBulletin Cybersecurity for mankind
A new open-source project named CyberStrike aims to be the first AI tool made for offensive security. It can turn any subscription of Claude, GPT, or LLM into an independent red-team operator.
CyberStrike is not just a chatbot. It works as a tool that runs in a terminal. It helps find flaws and weaknesses, exploits them, and creates reports without needing a person to guide it all the time. This makes it useful for penetration testers, bug bounty hunters, and security teams wanting to improve their assessments.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Getting started requires a single command, npm i -g @cyberstrike-io/cyberstrike@latest && cyberstrike, which launches a terminal interface that asks for an LLM provider and API key on first run.
The real change is in what the developers call the intelligence layer. This system adds OWASP testing methods, vulnerability patterns, and attack-chain reasoning to every model interaction.
This means the underlying AI does not need built-in security knowledge; CyberStrike provides security knowledge by organizing data, monitoring context, detecting providers automatically, and managing tools smartly.
The platform has more than 150 AI providers and 5,300 models. This includes Anthropic, OpenAI, Google, Amazon Bedrock, Azure, and offline options like Ollama and LM Studio for secure environments.
CyberStrike AI-Powered Security Platform
CyberStrike ships with 13 or more specific agents. These include special tools for testing web applications based on the OWASP WSTG guide, mobile testing that follows MASTG and MASVS, cloud security based on CIS benchmarks, and checking internal networks for Active Directory and lateral movement.
There are over 7,600 security skill files with Ed25519 signatures. They cover attack methods like JWT abuse, SSRF, SSTI, and GraphQL exploitation. They also include post-exploitation techniques for AWS, Azure, Kubernetes, Windows, and macOS.
A special part is the included Chromium browser named HackBrowser. It records live HTTP traffic while testers manually explore a target or automatically scan it using different accounts.
This traffic supports eight parallel proxy sub-testers. They look for problems like IDOR, bypassing authorization, mass assignment, and errors in business logic. Each tester uses a three-step confirmation method to prevent wrong alerts.
The Bolt part of the platform lets security tools work on remote servers instead of a local laptop. It uses Ed25519 key pairs to manage many toolkits and attack points from one terminal.
CyberStrike works with an MCP system that has 176 extra tools. These tools help with cloud checks, GitHub security, CVE information, and OSINT searches. It also has a web interface that can be accessed remotely using Cloudflare Tunnel, ensuring no open ports and secure encryption.
CyberStrike uses the AGPL-3.0 license. It is free for personal and open-source use. There is a paid license available for businesses. You can install it using npm, Homebrew, Scoop, or a curl script. This makes it easy to set up on macOS, Windows, and Linux.
The project clearly says it is only for approved security tests. It follows its ethical use rules and code of behavior while welcoming community support for agents, skills, and MCP servers.
