ARTEX and beyond: AI-enabled penetration testing platforms

Cisco Talos is tracking a surge in the in-the-wild usage of AI-enabled penetration testing and red team frameworks, such as ARTEX, which automate the attack chain from reconnaissance to follow-on actions at machine speed. Released on GitHub in July 2026, ARTEX has been adopted by various threat actors, including China-nexus groups like VAPOR PANDA and Storm-0940, for activities ranging from credential harvesting to cloud resource enumeration and data exfiltration. Researchers warn that these autonomous frameworks significantly reduce the time required for threat actors to compromise networks and challenge traditional human-driven incident response. Open article →