ARTEX autonomous pentesting framework exposed consoles in 2026

Researchers at Censys report that ARTEX, an open-source autonomous penetration testing framework released in July 2026, has been adopted by threat actors including a campaign targeting South Korean financial institutions and Microsoft-tracked Storm-0940 in a supply chain compromise. As of November 2026, Censys observed over 1,400 exposed ARTEX consoles globally, with dozens of instances leaking sensitive post-exploitation binaries and configuration files due to open directories. Open article →