Security researchers at Censys have found more than 800 publicly exposed copies of ARTEX, a Chinese-made, AI-powered, open-source penetration-testing tool linked to several cyberattacks since July. The findings were reported on November 8.
The tool is designed to help security professionals test systems for vulnerabilities. However, publicly exposed copies could allow anyone to access and use it, raising concerns about misuse.
The issue matters because AI-powered hacking tools can make cyberattacks faster and more scalable. They can help attackers analyse networks, identify weaknesses, and automate parts of an intrusion.
The exposure also highlights a broader problem in AI security: tools built for defensive research can become dangerous if they are not properly secured.
For organisations, the practical response is to review exposed systems, restrict access, and monitor for unusual activity. Companies should also ensure that security tools are not publicly accessible unless they are meant to be.
For researchers, the case is a reminder to secure AI tools carefully. Even defensive tools can become a risk if they are exposed to the internet without proper controls.
The findings sugges...