Security
Censys finds hundreds of Artex AI penetration-testing tool deployments exposed online without a password, per TechCrunch; why they are open is unclear
Censys found over 800 Artex deployments reachable without a password, TechCrunch reports. Artex is a Chinese-made open-source AI pentest tool linked to attacks.
The "copies" are running deployments of a tool, not leaked stolen data. TechCrunch reported on November 6, 2026 that Censys found more than 800 distinct deployments of Artex, a Chinese-made open-source autonomous penetration-testing tool, reachable from the web without a login password. Artex, released in July, has been linked to several cyberattacks. Censys notes that authorized testers also run the tool, so not every exposed instance is malicious, and it is unclear why so many are open.
The essentials
- What was found: more than 800 distinct Artex deployments accessible without a password, according to Censys as reported by TechCrunch.
- What Artex is: an open-source tool that uses AI agents to probe systems for weaknesses. Microsoft describes it as able to carry out attacks from reconnaissance to data exfiltration with little human interaction.
- Linked attacks: CrowdStrike attributed attacks on South Korean financial institutions to a Chinese-speaking actor who used an Artex instance, partly because of an open directory. TechCrunch also links the tool to an October attack on ConnectWise.
- Why it matters: anyone could reach the exposed consoles, and TechCrunch notes the tool appeals to people who cannot access the most advanced cybersecurity models from Anthropic or OpenAI.
Why do the numbers differ?
ShiftDelete.Net, citing Censys, reports 1,465 hosts running an exposed console as of November 5, against TechCrunch's more than 800 distinct deployments. Censys treats many addresses at two providers as templated copies rather than unique operators, so the two counts measure different things.
What happened to Artex itself?
TechCrunch says Artex announced it would go closed-source, limiting further releases to paying customers, but dozens of copies of its code remain on code-sharing sites and can still be used in attacks. One exposed instance had been open for months and held data from attacks beyond South Korean banks, including payments and gaming companies, per Censys as relayed.
What is not established
- Who operates the exposed instances: not established; some are authorized testers.
- Why so many are reachable from the internet: unclear, since the software does not require it.
- How much of the exposed data comes from real attacks: only one instance is described in the coverage we saw.
- Whether the attacks attributed to Artex were all carried out by the same actor: not stated.
Summary table
| Point | What is stated as of November 7, 2026 | Source |
|---|---|---|
| Report | TechCrunch, November 6, 2026, citing Censys | TechCrunch |
| Count | More than 800 distinct deployments without a password | TechCrunch |
| Other count | 1,465 hosts with an exposed console as of Nov. 5, many templated | ShiftDelete.Net |
| Tool | Chinese-made open-source autonomous pentest tool, released in July | TechCrunch |
| Status | Going closed-source; code copies remain online | Mezha |
FAQ
Did hackers leak Artex?
No. Researchers found running deployments left open on the internet; the tool was already open source.
Are all exposed instances used for attacks?
No. Censys notes authorized testers also run Artex.
Is Artex still available?
It announced a move to closed-source, but dozens of copies of its code remain on code-sharing sites.
Method and limits
Sources checked on November 7, 2026. We did not read the Censys research directly; we relied on TechCrunch, ShiftDelete.Net and Mezha. Disclosure: Anthropic makes Claude, which helps draft articles on this site. This is not security advice.
Sources
- TechCrunch: Hundreds of Artex AI hacking tools found publicly exposed to the web (verified 2026-11-07)
- ShiftDelete.Net: Artex AI Hacking Tool: 800+ Consoles Left Open Online (verified 2026-11-07)
- Mezha: More than 800 Artex AI hacking tool deployments exposed online, researchers say (verified 2026-11-07)
Spotted an error in this article? Report it · Our corrections policy
