超800个Artex AI黑客工具实例被曝公网无密码暴露
Start here
网络安全公司 Censys 发现,AI 自主渗透测试工具 Artex 有超过 800 个部署实例在公网处于无密码保护状态,任何人均可直接访问。微软指出,Artex 是一个可全自动执行从侦察到数据窃取全流程的 AI Agent 系统,且已被关联到针对韩国金融行业以及 ConnectWise 的多起网络攻击中。尽管 Artex 此前已宣布转向闭源并限制仅供付费客户使用,但其开源时期的代码副本仍持续在网络平台上流传,导致未受保护的暴露实例广泛存在。
AI-generated from reports · Updated 2 hours ago
Report timeline
Follow the reports to see different sides of the story.
- TechCrunch AISelectedHundreds of Artex AI Pen-Testing Deployments Exposed Online Without Password Protection
Cybersecurity firm Censys discovered that more than 800 deployment instances of Artex, an open-source autonomous AI penetration testing tool, are exposed on the public internet without password protection, leaving them accessible to anyone. Microsoft has characterized Artex as an AI agent system capable of autonomously executing entire kill chains from reconnaissance to data exfiltration; the tool has already been linked to several cyberattacks targeting South Korea's financial sector and ConnectWise. Although Artex previously announced a shift to a closed-source model restricted to paying customers, copies of its code continue to circulate across online platforms.
Story heat trend
Not enough continuous data yet to draw a trend.