800+ AI Hacking Tools Exposed Online Without Password

Censys found more than 800 copies of a Chinese-made penetration testing tool called Artex sitting open on the internet, no password required. Artex is an open source autonomous hacking system, software built to scan networks for weaknesses and exploit them without much human input. Microsoft has described it as capable of running an attack "from reconnaissance through data exfiltration with little needed human interaction." Since its public release in July, the tool has already been tied to several real-world cyberattacks.

Because Artex is free and open source, it's become the go-to option for people who can't get access to the more locked-down cybersecurity AI models built by Anthropic or OpenAI. That accessibility is also the problem. Anyone can download Artex, spin it up on a server, and start probing targets, and apparently hundreds of operators have done exactly that while leaving their own deployments wide open to the web.

Silas Cutler, the Censys researcher who flagged the exposures, notes that not every one of these instances is being run for malicious purposes. Plenty likely belong to authorized testers doing legitimate security work. What's harder to explain is why so many of them are reachable from the internet at all, since nothing about how Artex runs requires that kind of exposure.