Latest
  1. Google releases Gemini Decision 1, a model that scores up to 1,000 questions in one pass
  2. Google DeepMind releases AlphaGenome 2 to predict DNA variant effects in human cell types
  3. Torus raises $500m to run AI computing on spare grid power
  4. Cyprus approves National AI Strategy 2032, leaving funding to a later plan
  5. Meta and TikTok join Google in opposing Indonesia’s AI copyright bill
  6. UK’s Sovereign AI fund backs chip firm Fractile in a £500m-plus round
  7. Russia, China and US discuss curbs on AI in nuclear arsenals, report says
  8. CloudSEK says Silent Lynx spies ran an AI agent to steal Tajik government documents

Latest / Media, elections and online safety

ReportMediaFinanceInternational South KoreaConfirmed

Censys counts 1,465 hosts running the ARTEX AI attack tool, 32 with open directories

See how this story connects

Source: CensysAlso reported by TechCrunch

Censys said on 5 November that 1,465 internet hosts were serving consoles of ARTEX, an open-source AI agent framework for penetration testing, as of 3 November, or about 815 deployments after leaving out two hosting netblocks that account for about 44% of them. While writing the report it saw 32 open directories on ARTEX hosts exposing operators’ files; between 3 and 5 November 10 closed and 15 new ones appeared, and Censys keeps their file listings in its scan history. CrowdStrike and Microsoft linked ARTEX in October to attacks on South Korean banks and to Storm-0940’s ConnectWise Cloud Backup compromise.

Why it matters

Defenders can find ARTEX consoles under a Censys threat label, and Censys advises checking egress logs for unfamiliar LLM proxies and resellers, which 43 ARTEX hosts also ran.

When
5 Nov 2026
ID
WTA-N-2026-0780
Who
Censys, CrowdStrike, Microsoft

Summary written with AI by wheresthe.ai, from Censys and the reporting credited above. Checked against the source on 6 Nov 2026.

Read the original at Censys

Source copy: saved on 6 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextArctic Wolf links AntiFox AI pentest tool to intrusions that read an AWS production secret

Cite this story

WTA-N-2026-0780: “Censys counts 1,465 hosts running the ARTEX AI attack tool, 32 with open directories.” wheresthe.ai, 5 Nov 2026. https://wheresthe.ai/d/intl-censys-counts-1-465-hosts-running-the-artex-ai-attack-t-2026-11/ (source: Censys).

Spotted an error? Email [email protected].