Latest / Media, elections and online safety
Check Point finds 1,608 live ARTEX AI hacking panels used by cybercriminals
See how this story connectsCheck Point Research found 2,557 systems hosting or having hosted ARTEX panels, 1,608 of them live and public, and read the full database of 10 misconfigured instances. Chinese models were the most prevalent in the operator consoles, with DeepSeek Flash leading, and most attacks ran fully autonomously after the operator set the goal. One operator tasked agents with stealing Apple code-signing certificates from 10 gray-market signing shops, and the agents obtained more than 300, three of which passed validation.
Why it matters
The operators’ own consoles show criminals setting a goal and leaving ARTEX agents to find and exploit web flaws for opportunistic, financially motivated attacks with almost no further input.
- When
- 5 Nov 2026
- ID
WTA-N-2026-0786- Where
- International, China
- Who
- Check Point Research
- Topics
- Cybersecurity, AI agents, AI incidents
Summary written with AI by wheresthe.ai, from Check Point Research. Checked against the source on 6 Nov 2026.
Source copy: saved on 6 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.
Cite this story
WTA-N-2026-0786: “Check Point finds 1,608 live ARTEX AI hacking panels used by cybercriminals.” wheresthe.ai, 5 Nov 2026. https://wheresthe.ai/d/intl-check-point-finds-1-608-live-artex-ai-hacking-panels-us-2026-11/ (source: Check Point Research).
Spotted an error? Email [email protected].