THE CRUNCH

More than 800 deployments of Artex, an open source AI-powered penetration testing tool, are sitting on the public internet with no password required, according to a blog post by cybersecurity firm Censys. Artex automatically probes computer systems for weaknesses, and Microsoft has described it as a system of AI agents that can conduct cyberattacks from reconnaissance through data exfiltration with little human interaction. Anyone finding an exposed instance could potentially use it to launch attacks against unsuspecting targets.

Censys principal security researcher Silas Cutler noted that not every instance is operated maliciously, and many belong to authorised testers. But it is unclear why hundreds are exposed at all, since the software does not require internet accessibility to run. The exposed systems also reveal the attacker's own toolkit, including implants, meaning hidden malicious software used to maintain persistent access to a victim's network.

The tool has a track record. Security companies have linked Artex to broad-scale attacks on the Korean finance industry in September, which CrowdStrike attributed to a Chinese-speaking hacker who left an open directory hosting the system. Censys said that instance had been publicly exposed for months and contained attack data extending well beyond South Korean banks, including payment and gaming companies. Artex was also used in an October attack on IT support firm ConnectWise, letting Chinese-linked hackers spy on thousands of organisations with data in Microsoft's cloud; Microsoft said the hackers moved so fast that defenders had little time to detect and respond.

Many of the attacks linked to Artex exploited simple weaknesses such as weak or guessed passwords and missing multi-factor authentication. The episode shows that misconfigurations can expose both the attacker and their targets. Artex has since announced it will go closed-source, limiting future releases to paid customers, but dozens of copies of its code remain on code-sharing sites and can still be used in active attacks.