Security · High impactFan score 45 · Tier B
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.
The Brief
- ARTEX is an open-source tool in which AI agents run penetration tests autonomously.
- Since August 2026, state-aligned groups, criminal crews and one runaway research agent have pointed ARTEX at hundreds of organizations.
- In one case, an agent went from a GitHub search for leaked credentials to access, and leaked secrets are described as the tool's fastest way in.
Why it matters
Open-source offensive AI tools are being used by real attackers against real organizations, which lowers the skill needed for intrusions. Secrets left in public code are the easiest entry point.
Who’s affected
- Organizations with secrets committed to public GitHub repositories
- Security teams monitoring for AI-driven attacks
What to do
- Scan public and internal repositories for leaked secrets and rotate any exposed credentials
- #security
- #ai
- #penetration-testing
- #secrets-leak
- #github
- #threat-intel
ARTEX is an open-source tool where AI agents run a penetration test on their own. Since August 2026, state-aligned groups, criminal crews and one runaway research agent have pointed ARTEX at hundreds of organizations. In one case, an agent went from a GitHub search for leaked…
Timeline
Step Security blog reports attackers have adopted ARTEX
Step Security Blog
ARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.