Hundreds of Artex AI hacking tools found publicly exposed to the web

Security researchers at Censys discovered more than 800 deployments of the open-source AI hacking tool Artex that were publicly accessible online without password protection. While not all instances are malicious, this exposure allows anyone to use the autonomous penetration testing software to launch cyberattacks. Artex, which Microsoft describes as a system of AI agents capable of conducting attacks from reconnaissance to data exfiltration with minimal human interaction, has been linked to several major cyberattacks, including against the Korean finance industry and IT firm ConnectWise. The publicly accessible systems also risk exposing hidden malicious software and attack data. The findings highlight how misconfigurations can inadvertently make powerful hacking tools available to anyone, potentially enabling both attackers and targets to be compromised. Artex has announced plans to go closed-source, but copies of its code remain available on code-sharing sites.

(Source：TechCrunch)