● Open SourceNov 5, 2026 · 05:238 sources
Researcher Finds Backdoor in GitHub Repository for AI Attack Tool ARTEX
From marketbrief.now
AI;DR
The open-source code for ARTEX, an AI-powered penetration testing framework, contains a backdoor in its GitHub repository. Microsoft and CrowdStrike have linked the tool to Chinese state-aligned hacking groups, specifically Storm-0940 and Vapor Panda. These actors used ARTEX to target more than 2,250 Microsoft 365 tenants.
Read originalSign in to suggest
Sources
+ 5 more
- SUPPORT@cyberscoopnews“compromised about 140 sensitive targets in 11 days, according to CrowdStrike”x.com
- SUPPORT@blackroomsec“I asked yesterday if the fork was viable and not poisoned”x.com
- SUPPORT@rohanpaul_ai“Several ARTEX-driven intrusions went from first targeting to privileged cloud access in under 3 hours”x.com
- SUPPORT@kimmonismus“Microsoft says a China-aligned group used an open-source agent framework to hit 2,250+ Microsoft 365 tenants at 2,900 sign-in attempts a minute”x.com
- SUPPORT@reuters“used an AI-driven penetration testing tool to compromise IT services firm ConnectWise”x.com