Streetinsider SpartanX Unveils NodeX for Autonomous Internal Attack Validation
Article Content
- •SpartanX launched NodeX, the first full-stack autonomous internal attack capability.
- •NodeX uses over 500 agents to validate internal security without disrupting production.
- •Targeted Attack Validation (TAV) reduces false positives by confirming exploit paths.
On June 2, 2026, SpartanX announced the launch of NodeX, an AI-powered platform designed for autonomous internal red teaming. This capability extends the company's existing external attack platform, allowing for comprehensive internal validation that was previously reliant on human-led penetration tests. NodeX utilizes a swarm of over 500 agents to probe various internal systems, including Active Directory and APIs, while ensuring operations are non-destructive and fully audit-logged. The platform also integrates findings from over 150 security tools, including Tenable and Rapid7, to validate exploitations and reduce false positives. CEO Diego Spahn emphasized the urgency for defenders to match the speed of attackers, who now operate at machine speed. The introduction of Targeted Attack Validation (TAV) further enhances the platform's capabilities by providing confirmed-exploitable priorities rather than mere exposure assessments. This innovation marks a significant advancement in cybersecurity, addressing the gap between vulnerability disclosure and exploitation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…