The automated tool was recently deployed in high-profile intrusions against South Korean financial firms as well as IT provider ConnectWise, allowing threat actors to rapidly breach cloud environments before defenders could react. Exposed operational instances have leaked data revealing broader targeting across the payment and gaming sectors. Although the tool's developers are shifting to a paid, closed-source distribution strategy, dozens of copies of the original code remain actively hosted on public code-sharing platforms.
Key points
The autonomous software executes complete attack lifecycles from reconnaissance to data e…: The autonomous software executes complete attack lifecycles from reconnaissance to data exfiltration with minimal human guidance.
Attackers frequently leveraged the tool alongside basic organizational vulnerabilities su…: Attackers frequently leveraged the tool alongside basic organizational vulnerabilities such as missing multi-factor authentication and weak credentials.
Transitioning the software to a closed-source model will not mitigate risk because dozens…: Transitioning the software to a closed-source model will not mitigate risk because dozens of legacy code copies remain freely circulating online.
Sources checked by our analysis pipeline: 1
Security researchers have discovered hundreds of copies of a Chinese-made AI hacking tool publicly exposed to the internet for anyone to access, potentially allowing outsiders to launch cyberattacks against unsuspecting targets.
The hacking software, called Artex, is an open-source autonomous penetration testing tool, meaning software that automatically probes computer systems for weaknesses, and it’s been linked to several cyberattacks since its public release in July. As open-source software, it’s free for anyone to download and run on their own servers, making it a popular tool for those who cannot access Anthropic or OpenAI’s most advanced cybersecurity AI models for discovering security vulnerabilities. Microsoft has previously described Artex as a system of AI agents that can conduct cyberattacks “from reconnaissance through data exfiltration with little needed human interaction.”
In a blog post, cybersecurity firm Censys, which scans the internet for exposed or vulnerable systems, said that it identified more than 800 distinct deployments of Artex that were accessible from the web without needing a password to log in.
Silas Cutler, principal security researcher at Censys who wrote the blog post, said…
The artificial intelligence company plans to maintain its massive compute expansion strategy despite potential political shifts following the midterm elections. Leadership emphasized that long-term infrastructure funding remains a fundamental operational requirement that transcends political cycles. This ongoing capital deployment ensures the firm secures the processing capacity needed to train and deploy advanced models.
The feature introduces dynamic task hubs directly within the platform's sidebar to help individuals organize complex goals like vacation planning or DIY initiatives. By turning conversational prompts into automated project boards, the technology integrates with third-party tools to handle live updates in the background. This strategic addition builds on recent voice-enabled upgrades, intensifying competition against rival character-driven virtual assistants.
The tech giant is adjusting its infrastructure strategy by consolidating supplier partnerships while building out its own proprietary computing capacity. This strategic shift reflects changing demand dynamics following the post-ChatGPT capacity crunch, alongside mounting financial strain across specialized GPU hosting providers. Consequently, independent hosting vendors face shrinking revenue opportunities as major tech firms absorb more artificial intelligence workloads directly.