Tag: penetration-testing
-
Hundreds of Artex AI hacking tools found publicly exposed to the web
Security researchers found hundreds of servers hosting the penetration testing tool Artex exposed to the internet, allowing anyone access to the hacking tool. First seen on techcrunch.com Jump to article: techcrunch.com/2026/11/06/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web/
-
ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds
A new Censys report showed that the use of ARTEX, an AI pentesting tool popular with threat actor, could be spreading far beyond initially reported campaigns First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/artex-activity-exceeds-reported/
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
Hackers Put AI Agents on Autopilot to Steal Gaming Accounts and Apple Signing Certificates
ARTEX, a Chinese open-source agentic penetration-testing platform, to run autonomous attacks. The operators set a goal and then mostly check progress. Researchers identified 2,557 systems that host or hosted ARTEX panels, and 1,608 were live and public. Ten misconfigured instances exposed their full databases. Those databases show the models, prompts and actions behind the campaigns.…
-
ARTEX AI Framework Linked to Bank Breaches and Cloud Attacks Found Exposed Across Hundreds of Servers
Tags: ai, attack, banking, breach, cloud, cyber, data-breach, finance, framework, infrastructure, LLM, penetration-testing, supply-chainAn autonomous penetration-testing framework linked to South Korean banking breaches and cloud supply-chain attacks is publicly exposed across 1,465 hosts. The findings show that ARTEX, an LLM-driven offensive security platform released in July 2026, appears alongside conventional attack infrastructure while leaking sensitive operational files. Censys observed the exposed consoles as of November 4, but the…
-
Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns
ey Points Introduction ARTEX is a Chinese open-source, AI-powered penetration testing platform designed to help security teams assess systems they own or are authorized to test. It uses large language models (LLMs) to coordinate multiple AI agents that plan tests, run security tools, and record evidence of potential vulnerabilities. Its web dashboard brings together assets,…
-
Hackers Turn to AI Jailbreak Bundles as Researchers Uncover New Prompt Adware Technique
An AI jailbreak package that repeatedly modifies OpenAI Codex instructions to promote its author’s commercial service, showing how guardrail-bypass tools can double as advertising infrastructure. The Chinese language bundle, Haiou, was discovered on a cybercrime actor’s misconfigured web server alongside Cobalt Strike and penetration testing utilities. Published November 3, the investigation identifies the technique as…
-
QA With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
For years, cybersecurity teams have relied on vulnerability scanning and periodic penetration testing to identify weaknesses before attackers can exploit them. But real-world cyberattacks rarely follow a predictable path. Rather than exploiting a single vulnerability, attackers often combine stolen credentials, misconfigurations and seemingly minor security gaps to work their way through an organisation’s systems and…
-
QA With Pierre-Loic Kuhn at Filigran: Why Cybersecurity Needs to Evolve
For years, cybersecurity teams have relied on vulnerability scanning and periodic penetration testing to identify weaknesses before attackers can exploit them. But real-world cyberattacks rarely follow a predictable path. Rather than exploiting a single vulnerability, attackers often combine stolen credentials, misconfigurations and seemingly minor security gaps to work their way through an organisation’s systems and…
-
Novee puts forgotten internet-facing assets through penetration testing
Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/03/novee-external-surface-testing/
-
Chinese hackers use ARTEX AI in automated attacks against 200 orgs
Chinese hackers used ARTEX, an open-source, multi-agent AI penetration-testing framework, in attacks against more than 200 organizations across 14 countries. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/chinese-hackers-use-artex-ai-in-automated-attacks-against-200-orgs/
-
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations across Africa and Latin America. The findings illustrate AI moving beyond attack preparation into operational decision-making. Published November 2, Kaspersky’s investigation describes a human-directed operation in which an LLM selects tools, generates commands, interprets results, and determines subsequent actions. The…
-
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supplied report show attackers delegating substantial portions of post-compromise operations to coordinated AI agents, compressing execution sequences into seconds. Observed since late August 2026, the activity…
-
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supplied report show attackers delegating substantial portions of post-compromise operations to coordinated AI agents, compressing execution sequences into seconds. Observed since late August 2026, the activity…
-
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-vapor-panda-agentic-ai-artex-campaign-crowdstrike/
-
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously.The activity has been attributed by CrowdStrike to a China-based “targeted intrusion adversary” it tracks under the moniker Vapor Panda (previously VexatiousTemper). First identified in First seen on thehackernews.com Jump to…
-
How to prioritize remediation after a pentest: a practitioner workflow
A practical pentest workflow combines CVSS, EPSS and business impact to validate findings, prioritize fixes and document remediation decisions. Remediation prioritization after a pentest is the process of ranking and ordering security findings based on their risk, exploitability, and business impact. A penetration test can produce any number of findings, ranging from the very low…
-
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Major Updates
Kali Linux 2026.3 has been officially released, bringing six new security tools, updated image-building scripts, KDE Plasma 6.7, and major NetHunter improvements. Announced on October 26, 2026, this third release of the year includes 126 package updates and upgrades the Linux kernel from version 6.19 to 7.1.5.kali. This release focuses on customization, making it easier…
-
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack
-
Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
Tags: ai, attack, backup, breach, china, cloud, credentials, exploit, framework, group, microsoft, open-source, penetration-testing, supply-chain, toolChina-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft published a detailed technical report naming Storm-0940, a China state-aligned group, as the actor behind the ConnectWise Cloud Backup supply chain compromise. The group used ARTEX, an open-source AI-driven penetration testing framework, to run attacks…
-
China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application.During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning…
-
Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said. First seen on cyberscoop.com Jump to article: cyberscoop.com/microsoft-attributes-connectwise-supply-chain-attack-china-storm-0940/
-
The Harness Is the Hard Part of Agentic Pentesting
An AppSec team can point an AI agent running on a general-purpose model at its own web apps with little setup. Sure, the model writes the attacks. But everything that makes those attacks safe to run against production and worth acting on afterward lives in the harness around the model. The harness is where the…
-
New RedAgents AI Platform Deploys Multiple Hacking Agents to Find and Exploit Vulnerabilities
RedAgents, a cloud platform that deploys multiple AI penetration testing agents against authorized targets to discover vulnerabilities and test attack paths. Announced on October 16, 2026, the service brings Artex Pro, Cyber(YanJi), Yanxun, and CyberStrikeAI Enterprise Edition into a single environment for security operations teams. The platform addresses a limitation of automated security assessments: different…
-
Hackers Use Claude, DeepSeek and Grok in AI-Assisted Attacks on South Korean Banks
Hackers linked to attacks on South Korean banks used Claude Code, DeepSeek, Grok, and Zhipu AI alongside ARTEX, an open-source AI penetration testing framework. The campaign shows how attackers can combine AI services with familiar hacking tools to search for weaknesses across different systems, while leaving evidence that helps investigators trace their work. Public reporting…
-
Is AI pentesting as good as a human pentester?
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security testing. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/is-ai-pentesting-as-good-as-a-human-pentester/
-
The Blind Spots of Agentic Pentesting and How to Close Them
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and breach simulation can help close these gaps. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-blind-spots-of-agentic-pentesting-and-how-to-close-them/