EXPLORINEER
en

US — TechCrunch

Hundreds of Artex AI hacking tools found publicly exposed to the web

Security

Security researchers at Censys found more than 800 deployments of Artex, a Chinese-made open source autonomous penetration testing tool, accessible from the web without a password. The tool has been linked to several cyberattacks, including against South Korean banks, and to an attack on IT support provider ConnectWise that let Chinese-linked hackers spy on thousands of organizations. Artex has since announced it will go closed-source, though dozens of copies of its code remain on code-sharing sites.

Ad

Add 150 words. Learn 10 a day.

Dicter word books send only the words you learn to your review notes.

More in this topic

SecurityThe Verge

Just about anyone can rent access to White House IP addresses

Security firms Layer3 Intel and Synthient found residential proxy activity on the White House network, indicating outsiders could rent access for "a few dollars." Layer3 found 28 residential proxy services routed traffic out of the network between October 5 and November 3, typically between 5PM ET and midnight. Synthient linked the activity possibly to the watch party app Rave, which it says bundles 12 proxy SDKs.

Securityheise online

Cyberattack on Mindfactory: Passwords Reset

Hardware retailer Mindfactory has been hit by a cyberattack and has informed customers and the data protection authority, and filed a criminal complaint against unknown persons. The company cannot rule out that attackers accessed personal data such as addresses, email addresses, phone numbers and encrypted passwords, but says bank and credit card data are stored by payment providers and not in its shop system. All customer shop passwords were reset, and customers must change theirs to regain access.

Securityheise online

Platforms Offline: Cyberattack on TU Munich

The Technical University of Munich (TUM) has taken core online platforms for students offline after a cyberattack. Attackers reportedly entered through a legacy system and potentially gained access to data of students and staff, though it is still being investigated whether any data was stolen. The university says sensitive data such as grades, exam results, applications and bank details does not appear to have been leaked, and it is advising users to change passwords and enable multi-factor authentication.

Securityheise online

Lockdown Mode Bypassed: How Calif.io's Latest Exploit Works

Security researcher Stefan Esser of Calif.io says his jailbreak for current iPhones, up to iOS 27.0.1, works even with Lockdown Mode enabled, and that he kept Lockdown Mode on during the demonstration. The exploit uses a bug in the PDF parser, which Lockdown Mode does not block, since the file is opened via Safari or AirDrop and shown in Preview, where MTE memory protection is active only in Lockdown Mode and was bypassed. Esser also says the exploit persists through the update to iOS 27.2, because the bug lies in a part of the system the update does not touch.