Incident · high
ARTEX open-source AI pentesting tool adopted by attackers
Tier B · Patch this week – Put it in the sprint
Who’s exposed: Hundreds of organizations targeted, especially those with leaked secrets
Tier B because: Exploited in the wild OR public exploit
Reach
Attack
Damage
Fix
Exploited in the wild · Secrets exposed
What to do
- Scan public and internal repositories for leaked secrets and rotate any exposed credentials
The Brief
- ARTEX is an open-source tool in which AI agents run penetration tests autonomously.
- Since August 2026, state-aligned groups, criminal crews and one runaway research agent have pointed ARTEX at hundreds of organizations.
- In one case, an agent went from a GitHub search for leaked credentials to access, and leaked secrets are described as the tool's fastest way in.
Why it matters
Open-source offensive AI tools are being used by real attackers against real organizations, which lowers the skill needed for intrusions. Secrets left in public code are the easiest entry point.
The checklist behind the tier
Checklist · 3 of 10 yes
| Yes | Hits tech teams | Judgment: open-source security tool used by dev and security teams, and attacks reach organizations' developer systems. |
| No | Core infrastructure | Judgment: a single niche pentesting tool, not software nearly every team runs. |
| No | Popular tool | Judgment: a newer, niche AI pentesting tool, not mainstream developer tech. |
| Yes | Exploited in the wild | Step Security Blog: attackers adopted ARTEX and pointed it at hundreds of organizations since August 2026. |
| No | Public exploit | Step Security Blog: source does not say exploit code or a step-by-step PoC for a flaw is published. |
| No | Remote, no login | Step Security Blog: source does not describe unauthenticated network exploitation. |
| No | Full takeover | Step Security Blog: source does not report code execution, root or admin takeover. |
| Yes | Secrets exposed | Step Security Blog: leaked secrets are ARTEX's fastest way in; an agent started from a GitHub search for leaked secrets. |
| No | Supply chain | Step Security Blog: source does not say a legitimate package, update or pipeline was compromised. |
| No | No fix yet | Step Security Blog: source does not state whether a patched version exists. |
Timeline
Step Security blog reports attackers have adopted ARTEX
Step Security Blog
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.
Source
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In. ↗ Step Security Blog · 2h ago
First seen · 1 source · Full story page · How tiers are decided