Security researchers have discovered hundreds of instances of the Chinese-made AI hacking tool Artex publicly accessible on the internet without any password protection, potentially allowing outsiders to launch cyberattacks. The findings, published by cybersecurity firm Censys, identified more than 800 distinct deployments of the open-source tool that were accessible from the web with no authentication required.
The exposed systems also expose attack tools such as implants used to compromise and maintain persistent access to a victim’s network. Censys, which scans the internet for exposed or vulnerable systems, identified them. Silas Cutler, principal security researcher at Censys, said that not every instance is operated maliciously and many are used by authorized testers. It is unclear why hundreds of these systems are exposed to the web, as the software does not require them to be accessible from the internet.
Artex is an open-source autonomous penetration testing tool released in July. Microsoft has described it as a system of AI agents that can conduct cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.” The tool is free to download and run, making it popular among those who cannot access the most advanced AI cybersecurity models from companies like Anthropic or OpenAI.
Security companies have linked Artex to several cyberattacks. In September, its use was linked to attacks against the Korean finance industry, which cybersecurity firm CrowdStrike attributed to a Chinese-speaking hacker who used an Artex instance. The hacker had left an open directory hosting the system. Censys said the instance had been publicly exposed for months and appeared to contain attack data extending beyond South Korean banks to include payment and gaming companies.
In October, Artex was used in an attack on IT support giant ConnectWise, allowing Chinese-linked hackers to spy on thousands of organizations whose data and files are hosted in Microsoft’s cloud. Microsoft, which has visibility into the attack, reported that the hackers used Artex to break into customer cloud environments and steal data at such speed that defenders had “little time to detect and respond.” Many attacks linked to Artex involved exploiting simple vulnerabilities, such as guessing weak or known passwords, and a lack of multi-factor authentication.
The findings highlight how simple vulnerabilities, including misconfigurations, can expose both attackers and their targets. Artex has since announced it would go closed-source, effectively limiting further releases to paid customers. However, dozens of copies of its code remain available on code-sharing sites and can still be used in active attacks.
Analysis
Why This Matters
- The public exposure of these AI hacking tools increases the risk that they could be used by anyone to launch cyberattacks, lowering the barrier for malicious access.
- The discovery underscores how common security misconfigurations can turn powerful tools into liabilities, potentially exposing attack infrastructure and victims.
- The attacks linked to Artex demonstrate the growing role of AI in automating cyberoperations, which may accelerate the pace and scale of future intrusions.
Background
Artex is an open-source, AI-driven penetration testing tool publicly released in July 2026. It is designed to automatically probe computer systems for vulnerabilities and can be used for both legitimate security testing and malicious attacks. It has been linked to recent high-profile cyberattacks, including those targeting South Korean banks and the IT company ConnectWise.
What to Watch
- Whether the exposed instances are secured in response to the findings.
- The impact of Artex’s move to closed-source on its availability and use in attacks.
- Potential investigations or further disclosures by security firms or law enforcement.
Checked
11 claims in this story checked against 1 source: 11 supported.
Show each claim
- SupportedHundreds of Artex AI hacking tools were found exposed on the web.TechCrunch: “Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access”
- SupportedResearchers identified over 800 instances of Chinese-made Artex accessible without a password.TechCrunch: “cybersecurity firm Censys, which scans the internet for exposed or vulnerable systems, said that it identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in.”
- SupportedThe exposed instances could potentially allow outsiders to launch cyberattacks.TechCrunch: “publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets.”
- SupportedThe exposed systems also expose implants used to compromise and maintain persistent access to a victim’s network.TechCrunch: “The publicly accessible systems also expose attack tools, such as implants (hidden malicious software) used to compromise and maintain persistent access to a victim’s network.”
- SupportedSilas Cutler said not every Artex instance is operated maliciously and many are used by authorized testers.TechCrunch: “Silas Cutler, principal security researcher at Censys who wrote the blog post, said that not every instance of Artex is operated maliciously and many are used for authorized testers.”
- SupportedArtex is an open-source autonomous penetration testing tool released in July.TechCrunch: “The hacking software, called Artex, is an open-source autonomous penetration testing tool, meaning software that automatically probes computer systems for weaknesses, and it’s been linked to several cyberattacks since its public release in July.”
- SupportedMicrosoft described Artex as AI agents able to conduct cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.”TechCrunch: “Microsoft has previously described Artex as a system of AI agents that can conduct cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.””
- SupportedIn September, CrowdStrike attributed attacks against the Korean finance industry to a Chinese-speaking hacker who used an Artex instance.TechCrunch: “Cybersecurity giant CrowdStrike attributed the attacks to a Chinese-speaking hacker who used an Artex instance in the attacks”
- SupportedThe hacker had left an open directory hosting the system.TechCrunch: “in part because the hacker had left an “open directory” hosting the system.”
- SupportedIn October, Artex was used in an attack on ConnectWise that let Chinese-linked hackers spy on thousands of organizations whose data and files are hosted in Microsoft’s cloud.TechCrunch: “Artex was also used in an attack on IT support giant ConnectWise earlier in October, which allowed Chinese-linked hackers to spy on thousands of organizations whose data and files are hosted in Microsoft’s cloud.”
- SupportedMicrosoft said the hackers stole data so quickly that defenders had “little time to detect and respond.”TechCrunch: “Microsoft, which has visibility into the attack, said in a blog post that the hackers used Artex to break into customer’s cloud environments and steal their data at such speed that defenders had “little time to detect and respond.””
