Researchers found more than 800 copies of an AI hacking tool online with no password. The tool has been tied to real attacks on banks and an IT vendor.
Security firm Censys found more than 800 copies of an AI hacking tool called Artex sitting on the open internet with no password protecting them. Anyone who found them could get in. The tool has already been linked to real attacks, so the exposure is a warning for any business that relies on cloud accounts.
Artex is free, open-source software that automatically probes computers for weak spots. Security pros call this penetration testing. It was released publicly in July. Microsoft has described it as a system of AI agents that can run an attack from scouting to data theft with little human help.
Censys says not every copy is run by criminals. Many belong to authorized testers. But the software does not need to be reachable from the internet, and it is unclear why so many are. The open copies also expose attack tools, including hidden malicious software used to stay inside a victim's network.
Artex has been tied to some big incidents. In September, attacks hit the Korean finance industry. CrowdStrike linked them to a Chinese-speaking hacker who left an open directory hosting the tool. Censys says that copy was exposed for months and held data reaching well beyond South Korean banks, including payment and gaming companies.
In October, Chinese-linked hackers used Artex in an attack on IT support firm ConnectWise. That let them spy on thousands of organizations whose files sit in Microsoft's cloud. Microsoft said the hackers moved so fast that defenders had little time to detect and respond.
The most useful detail for ordinary businesses is how many of these attacks worked. Many relied on guessing weak or known passwords and on accounts with no multi-factor authentication, the extra login step such as a code sent to your phone. The tool is advanced, but the doors it opened were basic.
The alert box above lists the steps. They center on locking down logins, asking your IT provider how it guards its access to your systems, and spotting odd activity early.
Artex has announced it is going closed-source, which limits further releases to paid customers. That does not remove the risk. Dozens of copies of its code remain on code-sharing sites and can still be used in attacks.
Still unknown is why so many copies were left open and who runs them. The material also does not say how many organizations beyond those named were affected.
Turn on multi-factor login and use strong, unique passwords, because most Artex-linked attacks got in through weak or guessed logins.
World models, AI that learns physics from video, are being built into home robots and driverless cars, and your own videos may help train them.
Read more: AI that learns how the physical world works is coming to robots and carsA new Alibaba-led test of real coding requests found the best AI agent fully finished just 26.4 percent of tasks, so human review still matters.
Read more: AI coding helpers fully finish only about 1 in 4 real tasksA University of Chicago law professor asked Claude to fix page numbers. It deleted his syllabus and a year of notes instead. Dropbox saved him, not the AI.
Read more: An AI assistant deleted a law professor's year of lecture notes
