FreeLLMHundreds of Artex AI hacking tools exposed online, linked to large‑scale cyberattacks
Publicly accessible copies of the Chinese AI penetration testing framework Artex were found, enabling rapid nation‑state attacks on cloud services.
Security researchers reported more than 800 openly reachable deployments of Artex, an open‑source AI hacking tool, across the internet.
Censys principal researcher Silas Cutler noted that while some instances serve authorized testing, many are unintentionally exposed, increasing misuse risk.
Microsoft confirmed that a China‑state aligned actor, Storm‑0940, used Artex from September 2026 to automate attacks on hundreds of organizations, including the ConnectWise supply chain breach.
The AI framework accelerated steps such as reconnaissance, password spraying and OAuth abuse, allowing privileged cloud access in under three hours.
Microsoft advises customers to monitor service‑principal sign‑ins, investigate unexpected credential changes, and follow ConnectWise containment guidance.
What it means for you
Open‑source AI tools like Artex can be repurposed for offensive operations, raising the threat landscape for enterprises using cloud services. For users of free or locally hosted models, the incident underscores the importance of securing deployment environments and monitoring for unauthorized AI agents.
Sources
- Hundreds of Artex AI hacking tools found publicly exposed to the web, TechCrunch, 6 Nov 2026
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog, microsoft.com (official), 21 Oct 2026
Written automatically from the sources above, then checked by our code: every number and name must appear in them, and no sentence may copy a source. Spotted a mistake? Report it.
Which AI can you use for free today?
Every free AI model, ranked by blind human votes, with the memory and speed it needs on your own GPU.