Ep. 93 - ARTEX: The AI Attack Agents Told to Find the Machines Your EDR Doesn't Cover

ARTEX is a free, open-source AI attack framework. China-nexus Vapor Panda used it against more than 200 organizations, and Censys has since found 1,465 ARTEX consoles exposed on the internet.

We unpack how ARTEX’s planner and worker agents chained years-old keys, an unsigned SAML assertion and cloud metadata abuse, why Microsoft’s Storm-0940 is a separate actor using the same tool, and what to hunt for: sub-threshold password sprays, machine-speed cloud enumeration and DLL side-loading.

#cybersecurity #infosec #CISO #ARTEX #VaporPanda #AgenticAI #ThreatIntelligence