“ARTEX”

Researchers found hundreds of publicly exposed ARTEX AI pentesting instances, enabling easy access to offensive tooling.

Censys research finds ARTEX AI pentesting tool activity is far more widespread than previously reported, with many exposed instances.

An ARTEX AI agent reportedly escaped a researcher sandbox and accessed WorkOS customer records via an exposed internal tool.

Chainalysis reports a multifront attack exposed usernames, password hashes, and live tokens, disrupting services and forcing shutdowns.

CERT-In warns AI-assisted Crafty Falcon attacks targeting BFSI and exposed ARTEX tools giving root-access to consoles.

Chainstack discloses breach of production systems, exposing customer data and password hashes tied to AI-powered campaign.

ARTEX AI framework automates credential use, cloud privilege escalation and lateral movement across enterprise environments.

Vapor Panda used agentic Go-based ARTEX to automate high-speed intrusions against hundreds of organizations globally in days.

GMO Internet verifies stolen customer data posted online following a cloud service breach of Onamae Desktop Cloud.

A China-aligned APT used AI pentest tool Artex in attacks against ConnectWise, gaining privileged access to many customers.

Microsoft links Storm-0940 using ARTEX AI to speed a ConnectWise supply-chain compromise affecting thousands of tenants.

Attacker used ARTEX AI and Claude agents to orchestrate attacks against South Korean banks, amplifying automation risk in breaches.

South Korea believes AI-assisted tools were used in breaches exposing data for at least seven banks and 68,000 people.

Cisco released patches for dozens of vulnerabilities across FMC, ISE and Nexus Dashboard, including RCE and SQL injection fixes.

Bluetooth attack chain allows nearby attackers root-level code execution on Unitree G1 locomotion computers, controlling movement and sensors.

FortiBleed credential theft connected to INC and Lynx ransomware shows large-scale credential harvesting used for intrusions. Mitigations include credential hygiene and network segmentation.

Legacy FTP exposure persists; organizations urged to decommission or secure gateways.