Hundreds of Artex AI Hacking Tools Left Wide Open on the Web

Censys, a cybersecurity firm that scans the internet for exposed systems, says it spotted more than 800 separate Artex deployments sitting online without so much as a login prompt. The tool itself doesn't need to be internet-facing to work, so researchers are scratching their heads over why so many copies are. Silas Cutler, the Censys principal researcher who wrote up the findings, noted that not every instance is run by a bad actor — plenty belong to authorized testers. But an open door is an open door.

Artex is an open-source autonomous penetration testing tool, released publicly in July, that automatically hunts for weaknesses in computer systems. Microsoft has described it as a cluster of AI agents capable of carrying out attacks from reconnaissance all the way through data exfiltration with barely any human steering. Because it's free and downloadable, it's become a go-to for people who can't get their hands on the most advanced cybersecurity AI models from Anthropic or OpenAI.

The tool's track record is already ugly. CrowdStrike linked an Artex instance to broad attacks on the Korean finance industry in September, pinned on a Chinese-speaking hacker who left an open directory hosting the system. According to Censys, that same instance had been publicly exposed for months and held attack data reaching well beyond South Korean banks, into payment and gaming companies. Artex also showed up in an October attack on IT support giant ConnectWise, which let Chinese-linked hackers spy on thousands of organizations whose data lives in Microsoft's cloud. Microsoft said the intruders moved so fast that defenders had little time to detect or respond.

The uncomfortable twist: a lot of these intrusions leaned on painfully basic stuff — guessed passwords, known credentials, missing multi-factor authentication. The same kind of sloppiness that lets attackers in is what's leaving Artex boxes hanging out on the open web. And those exposed systems don't just leak the tool; they can spill implants, the hidden malicious software used to keep a foothold inside a victim's network.

Artex has since said it's going closed-source, which effectively cuts off further releases to anyone but paying customers. That doesn't clean up the mess already out there. Dozens of copies of the code remain on code-sharing sites, ready to be picked up and used in live attacks.