Hundreds of Artex AI hacking tools exposed online, linked to large‑scale cyberattacks
Publicly accessible copies of the Chinese AI penetration testing framework Artex were found, enabling rapid nation‑state attacks on cloud services.
Security researchers reported more than 800 openly reachable deployments of Artex, an open‑source AI hacking tool, across the internet.
Censys principal researcher Silas Cutler noted that while some instances serve authorized testing, many are unintentionally exposed, increasing misuse risk.
Microsoft confirmed that a China‑state aligned actor, Storm‑0940, used Artex from September 2026 to automate attacks on hundreds of organizations, including the ConnectWise supply chain breach.
The AI framework accelerated steps such as reconnaissance, password spraying and OAuth abuse, allowing privileged cloud access in under three hours.
Microsoft advises customers to monitor service‑principal sign‑ins, investigate unexpected credential changes, and follow ConnectWise containment guidance.
あなたにとっての意味
Open‑source AI tools like Artex can be repurposed for offensive operations, raising the threat landscape for enterprises using cloud services. For users of free or locally hosted models, the incident underscores the importance of securing deployment environments and monitoring for unauthorized AI agents.
ソース
- Hundreds of Artex AI hacking tools found publicly exposed to the web, TechCrunch, 6 Nov 2026
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog, microsoft.com (official), 21 Oct 2026
上記のソースから自動的に生成し、当社のコードでチェックしました:すべての数値と名前が含まれ、文がソースをコピーしてはいけません。間違いを見つけましたか?報告する。
今日無料で使えるAIはどれですか?
すべての無料AIモデルをブラインドヒューマン投票で順位付けし、あなたのGPUで必要なメモリと速度を示します。