The Chinese developer of the open-source AI penetration testing framework ARTEX transitioned the project to closed-source following recent high-profile security incidents. Cybersecurity firm CrowdStrike identified the ARTEX agent as a key tool used by threat actors in late-September cyberattacks targeting South Korean banks. The developer, known as Autumn-27, stated that the malicious exploitation violated the tool’s intended purpose of authorized security research and learning. The misuse has halted future public updates, code releases, and maintenance support for the project. The incident underscores growing concerns over how readily open-source AI security tools can be weaponized by malicious operators against critical infrastructure.

Full report : Following cybersecurity reports linking the open-source penetration tool to attacks on South Korean financial firms, the creator pulled the project offline.