Hundreds of Artex AI hacking tools found exposed on the web
Cybersecurity firm Censys discovers over 800 deployments of the Artex AI hacking tool publicly accessible on the internet without passwords.
Stock photo for illustration only, not from the actual event
- Censys discovered over 800 deployments of Artex AI hacking tools exposed online.
- The exposed systems required no passwords, creating severe cyberattack risks.
- The toolsets include implants designed to compromise and maintain persistent network access.
- Artex announced plans to move to closed-source following the security findings.
Security researchers have uncovered hundreds of copies of a Chinese-developed AI hacking tool left publicly exposed on the internet, granting unrestricted access to outsiders who could potentially launch cyberattacks against unsuspecting targets.
The findings were published by cybersecurity firm Censys, which scans the global internet for exposed and vulnerable infrastructure. According to their blog post, researchers identified more than 800 distinct deployments of Artex that could be reached via the web without requiring any login credentials.
Stock photo for illustration only, not from the actual event
Silas Cutler, principal security researcher at Censys and author of the post, noted that not every instance of Artex is operated maliciously, as many serve authorized testers. However, it remains unclear why hundreds of these systems were left exposed to the web when the software does not require internet accessibility to function.
This incident highlights how critical misconfigurations can undermine even advanced software. When powerful tooling is left without basic network isolation, it dramatically lowers the barrier of entry for malicious actors who stumble upon the exposed endpoints.
Furthermore, the exposure of such platforms creates a double-edged security risk, potentially revealing both the operational tactics of users and exposing sensitive internal attack infrastructure to rival groups or defenders.
The exposed systems also leaked advanced attack utilities, including implants used to compromise and maintain persistent access to victim networks. Many attacks tied to Artex relied on fundamental security weaknesses, such as weak default passwords and the complete absence of multi-factor authentication.
"The findings show that simple vulnerabilities, including misconfigurations, can expose both the attacker and their targets."
Censys Report
In response to the discovery, Artex announced it would transition to a closed-source model, restricting future releases exclusively to paying customers. Despite this shift, dozens of Artex code copies remain available across code-sharing platforms, leaving them viable for active cyberattacks.
Source: TechCrunch
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment