More on ARTEX, the open-source autonomous pentest agent tied to several attacks (latest post). Censys found more than 800 ARTEX deployments reachable from the web with no login, TechCrunch reports.
What’s exposed
Some are probably authorized testers. But the exposed systems also hold implants and attack data. Censys says the instance CrowdStrike tied to the September Korean bank attacks was public for months, with data reaching payment and gaming companies too. ARTEX says it’s going closed-source, but dozens of copies of the code are still floating around.
My take
Even the attackers forget MFA and leave their dashboards open. Most ARTEX attacks still came down to weak passwords and no MFA. Fix those two and you’ve blunted a lot of AI-driven offense.
God Bless, and Use the Source!
