RangeBench: 1,148 Multi-Hop Cyber Ranges Show Attack Agents Get a Foothold Then Stall — 24.5–47.0% Never Finish the Chain

arXiv 2608.09526·medium signalXBlueskyLinkedInCopy link

RangeFactory, posted 2026-08-10, automates construction of multi-hop cyber ranges by formulating range building as dependency resolution: it extracts dependencies from agents' actual attacks on real vulnerabilities, resolves them via template-guided orchestration, and validates runtime dependencies through end-to-end execution. The resulting RangeBench has 1,148 validated range instances spanning 287 distinct attack chains. Among runs that compromise the entry vulnerability, 24.5–47.0% still fail to finish the remaining path — a measurable 'sustained-compromise gap' between initial foothold and full chain. The work also releases 5,541 outcome-annotated multi-hop attack trajectories.