Hexstrike-AI: MCP Weaponized for Zero-Day Exploitation in Under 10 Minutes

Hexstrike-AI uses a FastMCP server to orchestrate 150+ specialized AI agents for autonomous scanning, exploitation, and persistence. Dark web actors weaponized it against Citrix NetScaler zero-days (CVE-2025-7775, CVE-2025-7776, CVE-2025-8424) within hours of disclosure, deploying webshells in under 10 minutes. This is the first production-grade offensive framework using MCP as its orchestration backbone — the same protocol builders use for legitimate tooling. The disclosure-to-exploitation window has collapsed to minutes. (Check Point Research, BleepingComputer)