Urgent.News

What's breaking now, across thousands of outlets.

AI

Censys finds 800+ publicly exposed copies of ARTEX, a Chinese-made, AI-powered, open-source penetration testing tool linked to several cyberattacks since July (Zack Whittaker/TechCrunch)

Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access …

Security researchers at Censys have identified more than 800 distinct deployments of Artex, a Chinese-made, AI-powered, open-source penetration testing tool, that are publicly accessible on the internet without password protection. TechCrunch reports that the software is an autonomous tool used to automatically probe computer systems for weaknesses, and it has been linked to several cyberattacks since its release in July.

Microsoft has described Artex as a system of AI agents capable of conducting cyberattacks from reconnaissance to data exfiltration with minimal human interaction. While the software is free to download and often used by those unable to access advanced cybersecurity AI models from OpenAI or Anthropic, Censys principal security researcher Silas Cutler noted that not every instance is operated maliciously, as many are used by authorized testers. It remains unclear why hundreds of these systems are exposed to the web.

Brief written by urgent.news from Techmeme, TechCrunch — 2 reports on this story. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at techcrunch.com →

More in AI

Europe needs Cold War-like deterrence for AI warfare, Poland says

The rise in AI-powered cyberattacks requires Europe to build a deterrence system similar to the one that prevented mutual destruction during the Cold War, Polish Deputy Minister Krzysztof Gawkowski…

  • Poland's Deputy Prime Minister calls for Cold War-style deterrence against AI warfare.
  • AI cyberattacks in Poland expected to increase tenfold by 2027.
  • State-level adversaries like Russia and Belarus pose AI threat.

Claude Code PreToolUse Hook: 80 of 91 Secret Blocks Were False Alarms

My agent was trying to keep secrets out of its own output. It ran grep -v "^./.env" to filter those lines away, and my Claude Code PreToolUse hook blocked it for touching a secret file.

  • Claude Code PreToolUse hook blocked 80 of 91 false alarms, 88% rate
  • Hook checks secret file names and dumpers separately, causing false alarms
  • 5 real secret file accesses slipped through due to lack of context

Meet Gnito: Your AI. Your Machine. Your Rules.

Meet Gnito: Your AI. Your Machine. Your Rules. What if you could run your own AI workspace locally, choose your AI provider, and keep control of your data? That's what I'm building with Gnito .

  • Gnito is an open-source, self-hosted AI workspace
  • Supports multi-provider AI connections and local model endpoints
  • Features include AI chat, attachments, projects, and local memory storage

More from Saturday 7 November →