Hundreds of Artex AI hacking tools exposed online, linked to large‑scale cyberattacks
Publicly accessible copies of the Chinese AI penetration testing framework Artex were found, enabling rapid nation‑state attacks on cloud services.
Security researchers reported more than 800 openly reachable deployments of Artex, an open‑source AI hacking tool, across the internet.
Censys principal researcher Silas Cutler noted that while some instances serve authorized testing, many are unintentionally exposed, increasing misuse risk.
Microsoft confirmed that a China‑state aligned actor, Storm‑0940, used Artex from September 2026 to automate attacks on hundreds of organizations, including the ConnectWise supply chain breach.
The AI framework accelerated steps such as reconnaissance, password spraying and OAuth abuse, allowing privileged cloud access in under three hours.
Microsoft advises customers to monitor service‑principal sign‑ins, investigate unexpected credential changes, and follow ConnectWise containment guidance.
Ce que cela signifie pour vous
Open‑source AI tools like Artex can be repurposed for offensive operations, raising the threat landscape for enterprises using cloud services. For users of free or locally hosted models, the incident underscores the importance of securing deployment environments and monitoring for unauthorized AI agents.
Sources
- Hundreds of Artex AI hacking tools found publicly exposed to the web, TechCrunch, 6 Nov 2026
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog, microsoft.com (official), 21 Oct 2026
Rédigé automatiquement à partir des sources ci‑dessus, puis vérifié par notre code : chaque nombre et chaque nom doivent y figurer, et aucune phrase ne doit copier une source. Une erreur ? Signalez‑la.
Quelle IA pouvez‑vous utiliser gratuitement aujourd’hui ?
Tous les modèles IA gratuits, classés par votes humains anonymes, avec la mémoire et la vitesse dont ils ont besoin sur votre propre GPU.