Hundreds of Artex AI hacking tools found publicly exposed to the web

Live updates

1. 1h ago

   Censys finds 1,465 exposed Artex AI hacking consoles as cybercrime use expands

   Internet scanning by Censys identified 1,465 hosts running publicly exposed Artex AI penetration-testing consoles as of November 4, 2026, representing roughly 815 distinct deployments. The open-source framework, released in July, has been linked to multiple cyberattacks and its exposed instances reveal post-exploitation kits, stagers and implants. Microsoft and Check Point Research report active abuse of Artex by cybercriminals targeting the financial sector, particularly banks in Southeast Asia. Palo Alto Networks Unit 42 and SOCRadar have issued defensive guidance for security teams monitoring the tool's offensive use.

   Why it matters

   Artex is an open-source, agentic AI penetration-testing framework that automates reconnaissance, exploitation and post-exploitation tasks. Its public release in July 2026 gave threat actors a ready-made offensive toolkit that requires minimal skill to operate. The large number of internet-exposed management consoles indicates operators are failing to secure their own infrastructure, while also providing defenders with observable indicators of compromise. Financial institutions in Southeast Asia have emerged as a primary target for Artex-driven campaigns.

   What is confirmed

   • Censys observed 1,465 hosts running an exposed Artex console as of November 4, 2026, leaving roughly 815 distinct-looking deployments.
   • The open-source AI penetration testing framework has been linked to several cyberattacks since its public release in July.
   • Open directories on Artex hosts expose post-exploitation kits, stagers and implants.
   • Microsoft reports ARTEX abuse expands as cybercriminals target the financial sector.
   • Check Point Research documents ARTEX cybercrime campaigns in 'Hacking on Autopilot'.
   • Free AI hacking is targeting banks in Southeast Asia.

   Still unconfirmed

   • Artex offensive AI tool activity far exceeds reported campaigns, according to Censys findings cited by Infosecurity Magazine.

   What to watch next

   • Patching or takedown of the 1,465 exposed Artex consoles
   • Emergence of new Artex variants or forks with enhanced evasion
   • Attribution of specific financial-sector breaches to Artex operators
   Sources used for this update (16)

   1. techcrunch.com — TechCrunch | Startup and Technology News
   2. www.techradar.com — TechRadar | the technology experts
   3. flipboard.com — Beloved singer’s wife killed after welcoming robbery suspects with lemonade
   4. tech.yahoo.com — 5 Classic SNES Games That Are Unplayable Today - Yahoo Tech
   5. digg.com — Microsoft, Alphabet and 14 others object to OKXICE’s tokenized-stock plans · Digg
   6. www.infosecurity-magazine.com — Confronting What Lurks in the Shadows: AI Regulation and Governance
   7. TechCrunch — Hundreds of Artex AI hacking tools found publicly exposed to the web
   8. Microsoft — ARTEX abuse expands as cybercriminals target financial sector
   9. Check Point Research — Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
   10. SOCRadar — ARTEX AI Pentest Tool: What Security Teams Need to Know
   11. Vietnam.vn — Free AI hacking is targeting banks in Southeast Asia.
   12. Infosecurity Magazine — ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
   confidence 88%