Researchers find over 800 Artex AI hacking tools exposed online, raising risk for banks and insurers

Security researchers have identified over 800 publicly accessible deployments of Artex, a Chinese-made AI hacking tool, according to cybersecurity firm Censys. Artex, an open source autonomous penetration testing tool, is designed to probe computer systems for weaknesses and has been linked to several cyberattacks since its release in July. Microsoft describes Artex as a system of AI agents capable of conducting attacks from reconnaissance through data exfiltration with minimal human input.

Censys reported that these Artex instances required no password to access, making them vulnerable to unauthorised use. While some deployments are used by authorised testers, the exposure of so many systems is unexpected, as the software does not require public internet access. Security companies have connected Artex to attacks on the Korean finance industry and a breach at IT support firm ConnectWise, which affected thousands of organisations using Microsoft’s cloud.

Many attacks exploited basic vulnerabilities such as weak passwords and lack of multi-factor authentication. The findings point to the risk posed by misconfigured security tools, which can expose both attackers and their targets.

Artex has since moved to a closed-source model, but copies of its code remain available online. Regulated firms should assess their own systems for similar exposures and ensure strong authentication is in place.