Hundreds of Artex AI hacking tools exposed online, linked to large‑scale cyberattacks
Publicly accessible copies of the Chinese AI penetration testing framework Artex were found, enabling rapid nation‑state attacks on cloud services.
Security researchers reported more than 800 openly reachable deployments of Artex, an open‑source AI hacking tool, across the internet.
Censys principal researcher Silas Cutler noted that while some instances serve authorized testing, many are unintentionally exposed, increasing misuse risk.
Microsoft confirmed that a China‑state aligned actor, Storm‑0940, used Artex from September 2026 to automate attacks on hundreds of organizations, including the ConnectWise supply chain breach.
The AI framework accelerated steps such as reconnaissance, password spraying and OAuth abuse, allowing privileged cloud access in under three hours.
Microsoft advises customers to monitor service‑principal sign‑ins, investigate unexpected credential changes, and follow ConnectWise containment guidance.
O que isso significa para você
Open‑source AI tools like Artex can be repurposed for offensive operations, raising the threat landscape for enterprises using cloud services. For users of free or locally hosted models, the incident underscores the importance of securing deployment environments and monitoring for unauthorized AI agents.
Fontes
- Hundreds of Artex AI hacking tools found publicly exposed to the web, TechCrunch, 6 Nov 2026
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog, microsoft.com (official), 21 Oct 2026
Escrito automaticamente a partir das fontes acima, depois verificado pelo nosso código: todo número e nome deve aparecer nelas, e nenhuma frase pode copiar uma fonte. Encontrou um erro? Reporte‑o.
Qual IA você pode usar grátis hoje?
Todo modelo de IA gratuito, classificado por votos humanos cegos, com a memória e velocidade que ele precisa na sua própria GPU.