October 18, 2026
- ApeX C2 v0.4 is the first public release of PhantomSec's post-exploitation framework and ships a native MCP operator interface: an MCP-capable LLM (Claude Code, Cursor, Codex) connects to the teamserver with a scoped, revocable token and can enumerate targets, author and upload modules, run them and adapt — 25+ tools across 15 scopes, every call logged. Zig-compiled Windows agent, on-agent LuaJIT, Cobalt Strike BOF compatibility via Havoc-style aggressor scripts, in-process .NET and image-backed call stacks (PhantomSec). · New Tools & Releases
in One Backup App's OAuth Grant Opened Hundreds of Microsoft 365 Tenants