What changed
Security researchers have discovered hundreds of copies of the Chinese-made AI hacking tool Artex publicly exposed to the internet, allowing anyone to access it. The tool, an open source autonomous penetration testing software, has been linked to several cyberattacks since its public release in July. Cybersecurity firm Censys identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in.
What this means in practice
The Artex tool, which Microsoft described as a system of AI agents capable of conducting cyberattacks with minimal human interaction, is free for anyone to download and run on their own servers. This accessibility makes it a popular choice for users who cannot access advanced cybersecurity AI models from Anthropic or OpenAI. However, the tool's exposure to the internet increases the risk of misuse, as it can be used to launch attacks against unsuspecting targets. Security companies have linked the use of Artex to several cyberattacks, including those targeting the Korean finance industry and IT support giant ConnectWise.
Limitations and availability
The findings highlight how even powerful hacking tools can be misconfigured to be publicly accessible, increasing the chance that someone will find and misuse them. While Artex has announced it will go closed-source, limiting further releases for paid customers, there are still dozens of copies of its code available on code-sharing sites that can be used in active attacks. The tool's exposure also includes attack tools such as implants used to compromise and maintain persistent access to a victim’s network. The supplied announcement does not specify the exact number of attacks attributed to Artex or the specific conditions under which it was used.
