--- title: Hundreds of Artex AI hacking tools found publicly... description: More than 800 deployments of the open-source AI hacking tool Artex were found publicly exposed online without password protection. Cybersecurity firm Censys... canonical: https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Hundreds of Artex AI hacking tools found publicly exposed to the web | daily.dev og:description: More than 800 deployments of the open-source AI hacking tool Artex were found publicly exposed online without password protection. Cybersecurity firm Censys... og:url: https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv og:image: https://api.daily.dev/og/posts/sIrIQ5XIV.png og:image:alt: Hundreds of Artex AI hacking tools found publicly exposed to the web og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Hundreds of Artex AI hacking tools found publicly exposed to the web **[TechCrunch](https://daily.dev/sources/tc)** · 3 min read · 0 upvotes · 0 comments ## Summary More than 800 deployments of the open-source AI hacking tool Artex were found publicly exposed online without password protection. Cybersecurity firm Censys made the discovery and published it in a blog post by researcher Silas Cutler. Artex, an autonomous penetration testing tool released in July, has been linked to attacks on Korean finance industry and IT giant ConnectWise. Many of the attacks linked to Artex involved exploiting simple vulnerabilities, such as weak or known passwords and a lack of multi-factor authentication. Artex has since announced it will go closed-source, though copies of its code remain available on code-sharing sites. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Artex and why is it considered dangerous? Artex is an open-source autonomous AI penetration testing tool that probes computer systems for weaknesses, released publicly in July. Microsoft describes it as a system of AI agents capable of conducting cyberattacks 'from reconnaissance through data exfiltration with little needed human interaction.' It has been linked to attacks on South Korean banks and IT provider ConnectWise. _Teams assessing AI-driven attack tools can follow coverage like this on daily.dev to stay ahead of emerging threats._ ### How many exposed Artex instances did Censys find and were they password protected? Censys identified more than 800 distinct deployments of Artex accessible from the web without requiring a password to log in. Principal security researcher Silas Cutler noted not every instance is used maliciously, but it remains unclear why so many were exposed since the software doesn't require internet accessibility. _Security engineers auditing internet-facing tools can track findings like this on daily.dev._ ### What vulnerabilities did attackers using Artex typically exploit? Attackers using Artex often exploited simple vulnerabilities, including guessing weak or known passwords and a lack of multi-factor authentication. The Korean finance industry attacks in September and the ConnectWise breach in October both involved such basic security gaps rather than sophisticated novel exploits. _Teams hardening authentication practices can follow incidents like this on daily.dev to prioritize fixes._ ## Similar posts on daily.dev - [TAG-217 Targets South Korean Financial Services with ARTEX](https://daily.dev/posts/tag-217-targets-south-korean-financial-services-with-artex-joikgzti8) · Recorded Future Blog · 0 upvotes · 0 comments - [AI helps Chinese-speaking hackers speed up attacks on exposed servers](https://daily.dev/posts/ai-helps-chinese-speaking-hackers-speed-up-attacks-on-exposed-servers-os1x7amnl) · CSO Online · 1 upvotes · 0 comments - [AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities](https://daily.dev/posts/ais-are-getting-better-at-finding-and-exploiting-internet-vulnerabilities-swm3nzacq) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#ai-agents](https://daily.dev/tags/ai-agents) [View this post on daily.dev](https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Hundreds of Artex AI hacking tools found publicly exposed to the web","url":"https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv"},"datePublished":"2026-11-06T18:48:42.123Z","dateModified":"2026-11-06T18:51:51.760Z","description":"More than 800 deployments of the open-source AI hacking tool Artex were found publicly exposed online without password protection. Cybersecurity firm Censys...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fc47e518084c1266efd0ccb38ccaa4bf?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/fc47e518084c1266efd0ccb38ccaa4bf?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,ai-agents","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"Hundreds of Artex AI hacking tools found publicly exposed to the web"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/hundreds-of-artex-ai-hacking-tools-found-publicly-exposed-to-the-web-siriq5xiv#faq","mainEntity":[{"@type":"Question","name":"What is Artex and why is it considered dangerous?","acceptedAnswer":{"@type":"Answer","text":"Artex is an open-source autonomous AI penetration testing tool that probes computer systems for weaknesses, released publicly in July. Microsoft describes it as a system of AI agents capable of conducting cyberattacks 'from reconnaissance through data exfiltration with little needed human interaction.' It has been linked to attacks on South Korean banks and IT provider ConnectWise. Teams assessing AI-driven attack tools can follow coverage like this on daily.dev to stay ahead of emerging threats."}},{"@type":"Question","name":"How many exposed Artex instances did Censys find and were they password protected?","acceptedAnswer":{"@type":"Answer","text":"Censys identified more than 800 distinct deployments of Artex accessible from the web without requiring a password to log in. Principal security researcher Silas Cutler noted not every instance is used maliciously, but it remains unclear why so many were exposed since the software doesn't require internet accessibility. Security engineers auditing internet-facing tools can track findings like this on daily.dev."}},{"@type":"Question","name":"What vulnerabilities did attackers using Artex typically exploit?","acceptedAnswer":{"@type":"Answer","text":"Attackers using Artex often exploited simple vulnerabilities, including guessing weak or known passwords and a lack of multi-factor authentication. The Korean finance industry attacks in September and the ConnectWise breach in October both involved such basic security gaps rather than sophisticated novel exploits. Teams hardening authentication practices can follow incidents like this on daily.dev to prioritize fixes."}}]} ```