Hundreds of Artex AI Hacking Tool Instances Found Publicly Exposed Online
Security researchers at Censys have discovered over 800 distinct deployments of Artex, a Chinese-made autonomous penetration testing tool, exposed to the internet without password protection. While some instances may be used for authorized security testing, many are vulnerable to misuse by malicious actors due to misconfigurations. Artex is an AI-driven system capable of conducting cyberattacks from reconnaissance to data exfiltration with minimal human intervention. The tool has already been linked to significant breaches, including attacks on the South Korean finance sector and a breach of IT giant ConnectWise that impacted organizations using Microsoft cloud environments. In response to these security concerns and its widespread use in malicious activities, Artex has announced a transition from open-source to a closed-source model for paid customers. However, existing code remains available on various platforms, continuing the risk to global cybersecurity.
Topics: AI hacking tools Artex tool exposure cybersecurity vulnerability open-source software risk