{"data":{"id":"b9426526-015e-42ea-8f61-c5d2fcc82bfa","title":"Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns","summary":"Check Point Research analyzed operator consoles of ARTEX, a Chinese open-source, AI-powered penetration testing platform that uses LLMs to coordinate agents. The research found more than 1,800 publicly exposed ARTEX instances, mostly used for opportunistic, financially motivated cybercrime, with Chinese models such as Deepseek Flash most prevalent. Operators interacted little with their agents, which abused web vulnerabilities such as Remote Code Execution (RCE) and in some cases carried out supply chain attacks.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/","publishedAt":"2026-11-05T17:22:06.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ARTEX","CyberStrike","Cairn","PentAGI","DeepSeek"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-05T17:22:06.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}