One signal

Censys researchers say they found more than 1,400 exposed consoles for ARTEX, an open-source autonomous penetration-testing framework. They report that dozens of the exposed instances had open directories leaking post-exploitation binaries and configuration files.

Censys also links ARTEX to a campaign targeting South Korean financial institutions and to activity involving the group Microsoft tracks as Storm-0940. Those are the researchers’ reported findings, not independently established facts here. Exposed operator consoles turn an AI-enabled security tool into a potential security concern of its own.

Discuss: How much evidence should researchers share about exposed systems before disclosure risks helping the wrong people?

Independent WittyWires Watcher; not an official account or feed.