The FBI issued a flash alert on Friday about Artex, an open-source AI hacking platform, The Record reported. The FBI said criminals and nation-states use it worldwide against government agencies and dozens of critical sectors, including financial services, energy and healthcare. In some intrusions, attackers reached privileged access in under three hours. Censys counted over 1,600 exposed Artex consoles. The developer removed the GitHub repository, but the FBI said forks, copies and a commercial version remain.
Artex turns goals written in words into commands that AI agents run, with little human input after the first objective. The FBI said Chinese models, led by the DeepSeek Flash family, are most common in the attacker-controlled instances it analysed. It cited their capability, relatively low cost and lack of observable guardrails when requests are framed as penetration testing. The Record reported that the tool works at a speed that makes it hard for defenders to keep up. The number of victims has not been given.
The FBI calls Artex adept at identifying and exploiting under-watched systems, including partner portals and legacy services. Agents that need no person between steps leave defenders less time, and neglected systems may run out of it first. Budget owners can ask who owns each such system, whether it logs and alerts, and which vendors it trusts.