Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence AI-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has been attributed by CrowdStrike to a China-based "targeted intrusion...

Tracking AI adoption in North Korean threat actor tradecraft

In this article 1. Stages of AI adoption by North Korean threat actors 2. AI use across North Korean threat operations 1. AI-assisted targeting and reconnaissance 2. AI-assisted social engineering and identity deception 3. AI-assisted software and tooling development 4. AI-assisted operational...

ARTEX

ARTEX AI autonomous penetration testing system. Multi-agent LLM, Go backend, Next.js frontend. AI autonomous penetration testing system Go backend + Next.js frontend. ARTEX is a multi-agent system for autonomous penetration testing in an isolated lab: a planner and workers share an asset graph an...

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

Wiz Research is tracking an ARTEX-using actor, overlapping with Storm-0940, across multiple targeted software vendors. Learn how the AI agent attacks Okta, Entra, and Cognito, and what it left behind in the logs...

China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack

Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-sourc...

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

In this article 1. What’s happening 2. What is ARTEX? 3. Mitigation and protection guidance 4. References 5. Learn more As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of...

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...

artex-web.ru Cross Site Scripting vulnerability OBB-3683884

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

artex-web.ru Cross Site Scripting vulnerability OBB-2971809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

artex-web.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1080207 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Artex Mah-Jongg - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Artex Mah-Jongg published at the 'play' market has multiple vulnerabilities...