What ARTEX is

ARTEX is an AI hacking toolkit that automates much of the work a human attacker used to do by hand. It was the lead story on Risky Business #859, "ARTEX damage approaches crisis levels" (Nov 11, 2026), where hosts Patrick Gray and James Wilson and guest co-host Chris Krebs walked through what it is and why security teams are alarmed.

ARTEX began as a penetration-testing framework, the kind of tool companies hire testers to run in authorized, simulated attacks. Censys says it was released as open source in July 2026. Wilson's point on the show is that it is "really not all that sophisticated." It gives an AI language model a way to take notes and retrieve them later, lets several AI agents coordinate, and puts an orchestrator on top. An orchestrator is the software that hands out tasks to those agents and keeps them working toward one goal.

Wilson says the developer took the project closed-source after it was implicated in breaches at South Korean banks. Censys dates that announcement to October 8, 2026. By then, Wilson says, "a bunch of people had forked it." Censys reports that archived copies and rebrands are still circulating. Wilson also says ARTEX is now sold as a paid SaaS (software-as-a-service) platform.

A professional man in a suit and glasses works at a laptop at a desk in a bright office.

What Risky Business says has changed

The short version: attacks are coming faster, and many organizations can't see them happening. Gray says the "tempo of incidents has really ticked up" since ARTEX spread. Wilson says it "was implicated in the breach of some South Korean banks." The episode does not name who was behind those breaches, and neither do we.

The show cited "nearly 1,500" exposed ARTEX consoles, meaning control panels left reachable on the open internet. Censys counted 1,465 in a November 5 post. About 650 of those sit in two blocks of identically configured hosting, which leaves roughly 815 distinct-looking deployments. The show also discussed developer platform WorkOS, which, BleepingComputer reports, says an attacker used ARTEX to breach an internal sales app.

Krebs adds the uncomfortable part: defenders often aren't instrumented to pick it up, meaning their monitoring isn't set up to spot it.

Why "too small to bother with" no longer protects you (NTx's reading)

To be clear, the hosts do not say ARTEX mainly targets small businesses. Krebs says the opposite: "we're not even talking small, medium businesses." He suspects it is hitting every government agency, financial services firm and energy company. What follows is NTx's reading of what the episode means for privately held businesses and SMEs.

Gray says people have long "relied on the fact that there aren't enough man hours" in the criminal underground "to go and exploit everything and AI changes that." He frames WorkOS as exactly that case: "an old service running on a platform that they knew was legacy," the sort of long-tail system nobody expected attackers to bother with. WorkOS itself says no app data or production services were accessed, according to BleepingComputer.

Automation removes the effort that made small targets not worth the trouble, and ARTEX-style tools go after things privately held businesses tend to have: out-of-support systems, passwords and keys left in code, and little monitoring. Cybersecurity Dive reports that Microsoft researchers found attackers using ARTEX and similar tools to scan public GitHub repositories for exposed credentials and API keys. Separately, Truffle Security says 1.4 million publicly exposed secrets remain valid (BleepingComputer). We covered this pattern in Agentic AI Is Hunting Exposed Secrets.

When help is scarce

If you are breached right now, outside help may be slow to arrive. Krebs says incident response firms, the specialists who investigate and contain breaches, have been "at or approaching capacity." NBC News (Kevin Collier, Nov 9) reports that some top cybersecurity companies are turning away new customers seeking emergency help. On the episode, Gray adds that firms told NBC they are not taking new customers unless there is an existing relationship.

In NTx's reading, that matters most for businesses without an incident response retainer: a pre-arranged contract that guarantees a firm will answer when you call.

What owners and managers of remote teams should do now

Krebs was blunt about slow patch programs: "You don't have six months." To anyone who signed off on an out-of-support system to deal with later, he added, "You don't want to be that person." For a business with a distributed team and a lot of cloud apps, that translates into four steps:

  • Retire or isolate out-of-support systems. If something can't be patched, take it off the internet or put it behind a login only your staff can reach.
  • Find and rotate secrets. Check code repositories and third-party connections for exposed passwords and API keys, then replace them. That includes OAuth apps, the connections that let other software sign in to Microsoft 365 and act on your behalf. In a separate campaign, Todyl reports (Cybersecurity Dive, Nov 6) that an attacker used stolen Microsoft Entra ID app secrets to reach Microsoft 365 and Azure environments at managed service providers and their clients. Cybersecurity Dive says Microsoft found the activity overlaps by IP address with the ARTEX-linked GitHub scanning.
  • Line up incident response before you need it. Know who you would call, whether that's a retainer or your managed service provider agreement.
  • Shorten patch timelines. See our guides on Chrome zero-days, the PHP2Shell update and faster WordPress security releases.

We can help you with that.

NTx AI Consulting works with owner-led and partner-led privately held businesses that are currently using AI tools in everyday workflows, or would like to be. The complimentary consultation is a working session, not a product demo. If a deeper engagement makes sense, Phase 1 is an AI Disruption Readiness Audit. You can learn more at https://ntx.ventures/ai-consulting/.

Sources

  1. Risky Business #859, "ARTEX damage approaches crisis levels". https://risky.biz/RB859/
  2. Censys. https://censys.com/blog/artex-agentic-asbestos
  3. BleepingComputer reports. https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app
  4. Cybersecurity Dive reports. https://www.cybersecuritydive.com/news/hackers-artex-github-repositories-exposed-secrets/874007
  5. 1.4 million publicly exposed secrets remain valid. https://www.bleepingcomputer.com/news/security/truffle-security-launches-program-to-revoke-14-million-live-secrets
  6. NBC News. https://www.nbcnews.com/tech/security/ai-hacking-getting-worse-cyber-firms-are-turning-away-victims-rcna607617
  7. Todyl reports. https://www.cybersecuritydive.com/news/attacker-microsoft-entra-id-downstream-msp/873744