🚨Hundreds of Exposed Artex AI Hacking Tools Found Open to the Internet

Your exposed servers might be running someone else's attack tool

Hundreds of copies of Artex, a Chinese-made autonomous penetration testing tool, are sitting on the open internet with no password. Some of them are being used to break into real networks. Microsoft describes it as a set of AI agents that can handle everything from reconnaissance to data exfiltration with almost no human input. If you run security tooling or self-host anything with an AI agent layer, this is your problem too. The software doesn't need to be internet-facing at all, so every exposed instance is a misconfiguration somebody made. Attackers are using these exposed panels to grab implants that maintain persistent access, which means your staging box could be someone's foothold. Over 800 distinct deployments were found accessible without authentication. Artex was linked to an attack on South Korean finance in September, carried out by a Chinese-speaking hacker whose open directory exposed data beyond local banks. In October it was used against IT support giant ConnectWise, letting hackers spy on thousands of organizations whose files live in Microsoft's cloud. Artex has announced it will go closed-source, but dozens of code copies remain on sharing sites and still work in active attacks.