Over 800 Artex deployments exposed online as the tool goes closed source
What happened
Artex is an open-source autonomous penetration-testing tool developed in China. Some deployments are used for authorized testing, but security firms have also linked it to attacks on South Korea's financial sector in September and on ConnectWise in October. On November 7, TechCrunch reported that security company Censys found more than 800 Artex deployments reachable directly over the internet with no password, leaving them open to use by outsiders for cyberattacks. Artex has said it will go closed source, with later versions available only to paying customers, but dozens of code copies remain on code-sharing sites and can still be used for attacks.
Written by AI from the coverage · updated 1 hour ago
Coverage
Follow the reports to see the story from different sides.
- TechCrunch · AIHundreds of Artex AI hacking tools found publicly exposed to the web
网络安全公司Censys发现，超过800个Artex部署可通过互联网直接访问，无需密码登录，存在被外部人员用于发动网络攻击的风险。Artex是中国开发的开源自主渗透测试工具，部分部署用于授权测试，但安全公司也将其与9月针对韩国金融行业及10月针对ConnectWise的攻击联系起来。Artex已宣布将转为闭源、限制后续版本仅供付费客户使用，代码分享网站上仍有数十份代码副本可用于攻击。
Heat over time
Not enough continuous observations to draw a trend yet.