Glossary
Webshell
A small script an attacker uploads to a web server so they can run commands on it through a browser; the classic first foothold in a server intrusion.
In the AntiFox intrusions documented by Arctic Wolf, an AI pentest agent dropped an ASPX webshell on an IIS server and used it to read configuration files containing AWS keys. Detection is file-based (new scripts in web directories) and behavioural (a web process spawning shells). Correlating a new webshell with a burst of cloud API calls is now the signature of an agent-driven attack.
Related terms
Agent harnessNon-human identitySandbox escape
Get the brief in your inbox
One email every morning: the stories that mattered in AI, each with a one-line "why it matters" for your role. Free, no ads, unsubscribe any time.
Published daily by AI Briefing. We never share your address.