GoKawiilResearchers find 800+ unsecured deployments of Artex AI hacking tool online
Censys security researcher Silas Cutler identified more than 800 instances of Artex, an open-source autonomous penetration-testing tool, accessible over the internet without any password. Artex, released publicly in July, has been linked to multiple cyberattacks, including a September incident targeting Korea's finance industry. Cutler noted the software does not require internet exposure, and while many deployments likely belong to authorized testers, the reason so many are publicly accessible remains unclear.
GoKawiil's interpretation of the reporting above, not reported fact.
The exposure suggests that powerful, automated hacking software can be misconfigured in ways that let unauthorized actors discover and repurpose it for attacks, potentially lowering the barrier to sophisticated intrusions. Because Artex handles tasks from reconnaissance to data exfiltration with minimal human input, as Microsoft has described it, any misuse could scale attacks quickly. The findings highlight a broader risk that open-source AI security tools, while useful for defenders, can also become attack infrastructure if left unsecured.
- Censys found over 800 exposed, password-free deployments of the Artex AI penetration-testing tool.
- Artex has been tied to cyberattacks since its July release, including one against Korea's finance sector.
- Experts say the tool doesn't need to be internet-facing, raising questions about why so many instances are exposed.
Source: techcrunch.com — Zack Whittaker, 2026-11-06
Published there as: “Hundreds of Artex AI hacking tools found publicly exposed to the web”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.