← Back to the board
Issue file · activeTracking since Nov 2 · 24 articles · 14 outlets
FBI warns hackers are using open-source AI framework ARTEX to automate attacks
Tracking: AI-enabled cyber threats to government networksPolicy matter covering AI-enabled cyberattacks and autonomous AI agents in government and contractor networks, the hacking of government systems and officials' devices, and federal responses such as agent monitoring, contractor cybersecurity obligations and critical-infrastructure resilience.
CyberAI
Articles · 14 days
- Earliest seen
- Nov 2
- Semafor · Monday, Nov 2
- Articles · 30d
- 24
- 1.8 per story
- Outlets
- 14
- Most: BleepingComputer (3)
- Hill · 30d
- 0
- None in 30 days or ahead
- Contracts · 30d
- 0
- No awards or solicitations
- Momentum
- 4.7
- Articles ▲16 vs prior week
Activity
30 days back, 14 ahead · hollow = scheduledWhat's happening
Updated 2h agoThe FBI issued a FLASH advisory this week warning that criminals and nation-state actors are using the open-source ARTEX AI pentesting framework to automate intrusions across sectors. Palo Alto Unit 42, Censys and Amazon have reported similar AI-driven activity, including a China-linked campaign using the Cairn framework. Separately, German drone maker Quantum Systems says its drones are flying again after a late-October cyberattack led the Bundeswehr to ground them. No hearings, votes or deadlines appear in the items.
Latest
2h agoOur first signal
Hill
No policymaker activity in the window.
Contracts
No procurement or funding activity in the window.
Pressure
22 articlesSecurity vendors and researchers (Palo Alto Unit 42, Censys, CloudSEK, Amazon) are publicly opposing AI-driven intrusion tooling and urging defenders to adapt, while the FBI is calling out ARTEX misuse.
Who covered it, when
A dot per article · ringed = earliest in our sourcesForces at work
share of articles- Threats & findings22 · 100%The FBI's ARTEX advisory is backed by Unit 42, Censys and Amazon findings on autonomous AI intrusions. Researchers also document a China-linked Cairn campaign, the Silent Lynx espionage operation in Central Asia, an AI-agent-assisted Chainalysis breach exposing government customers' credentials, and the Quantum Systems incident that grounded German military drones.FBI · Palo Alto Unit 42 · Quantum Systems · CloudSEK · Censys
In the news
24 articles2h agoBleepingComputerFBI warns ARTEX AI hacking tool is powering global cyberattacks 5h agoWiz ResearchOriginalARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz Blog 5h agoWiz ResearchOriginalThe Rise of Agentic Attacks: What They Look Like, and Where They're Headed | Wiz Blog YesterdayThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ 2d agoBleepingComputerGerman military drone operations disrupted by cyberattack 2d agoYahooCyberattack hits German drone manufacturer supplying Ukraine in late October, company confirms 2d agoThe Kyiv IndependentEarliestCyberattack hits German drone manufacturer supplying Ukraine in late October, company confirms 2d agoThe RegisterQuantum Systems drones back in the air after malware scare 2d agoYahooEarliestQuantum Systems says grounded German military drones flying again after cyberattack 2d agoYahooGerman drone maker Quantum Systems reports cyberattack 3d agoCSO OnlinePalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fears 3d agoPalo Alto Unit 42EarliestOriginalAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors 3d agoThe RecordKazakhstan-linked hackers used AI agent to spy on Central Asian governments 3d agoPalo Alto Unit 42OriginalARTEX and AI-Powered Red Teaming Tools: What Defenders Need to Know 4d agoCloudSEKOriginalOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK 4d agoCloudSEKOriginalOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK 4d agoCloudSEKEarliestOriginalOff the Rails: Inside an Exposed Silent Lynx Server | CloudSEK 6d agoArs TechnicaVulnerability that lets hackers SSH into Linux devices is under active exploitation 6d agoArs Technica SpaceVulnerability that lets hackers SSH into Linux devices is under active exploitation 6d agoBleepingComputerEarliestHackers exploit SSHole OpenSSH flaw to breach Linux systems 7d agoHuntbackOriginalInside SOÛL SOCIETY: automated exploitation, AI agent orders and a Telegram drug platform 8d agoArs Technica SpaceChainalysis says hackers stole credentials and tokens for all of its customers 9d agoCensysOriginalARTEX: Agentic Asbestos 13d agoSemaforNew hacks underscore AI security concerns