Hundreds of Artex AI hacking tools found publicly exposed to the web

Security researchers have uncovered hundreds of publicly exposed copies of an AI hacking tool known as Artex, potentially enabling malicious actors to launch cyberattacks against unsuspecting targets. Artex is an open-source autonomous penetration testing tool that automatically probes computer systems for vulnerabilities. Since its public release in July, it has been linked to several cyberattacks, including against the Korean finance industry and IT support giant ConnectWise.

The tool, which can conduct cyberattacks from reconnaissance through data exfiltration with minimal human interaction, is typically used by authorized testers. However, the reasons why hundreds of these Artex systems are exposed to the web remain unclear, as the software does not require them to be accessible online. The publicly accessible systems also expose attack tools, allowing hackers to compromise and maintain persistent access to victim networks.

Cybersecurity firms have traced the use of Artex to attacks against Korean banks, payment companies, gaming firms, and ConnectWise, highlighting the tool's potential for widespread misuse. Artex's developers have announced they will go closed-source, but dozens of copies of the tool's code remain available online, posing ongoing risks to organizations.