[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgpeT0ApVillb8CJfqEU653RycRktfs1uTm3ktW72z1o":3},{"article":4,"iocs":45,"watch_terms":51,"solutions":52,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"12c0c64e-8ec2-4f1d-9fff-67105eb38f7b","AI Hacking Frameworks Like ARTEX, PentAGI, and Agent Zero Found Running on Internet-Accessible Servers","ai-hacking-frameworks-like-artex-pentagi-and-agent-zero-found-running-on-interne-0a53e4","AI-powered hacking and penetration-testing frameworks are running on internet-accessible servers, with some management consoles left open without authentication. A November 7, 2026, Shodan snapshot recorded 1,428 services matching the ARTEX family, 419 matching PentAGI, and 173 matching Agent Zero, showing how widely these tools have spread. These platforms connect language models to security tools, allowing […] The post AI Hacking Frameworks Like ARTEX, PentAGI, and Agent Zero Found Running on Internet-Accessible Servers appeared first on Cyber Security News.","AI-powered hacking and penetration-testing frameworks like ARTEX, PentAGI, and Agent Zero have been found running on internet-accessible servers, with some management consoles left open without authentication. Researchers identified these exposed deployments, noting that while these tools can be used for authorized testing, attackers can leverage them for automated reconnaissance, exploitation, and credential theft. The creator of ARTEX removed the original project due to abuse, but numerous forks have since appeared.","AI hacking frameworks found exposed on internet-accessible servers.","https:\u002F\u002Fcybersecuritynews.com\u002Fai-hacking-frameworks\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FAI-Hacking-Frameworks-Like-ARTEX-PentAGI-and-Agent-Zero-Found-Running-on-Internet-Accessible-Servers.webp","2026-11-11T17:07:39+00:00","2026-11-11T18:00:30.246208+00:00",8,[17,20,22,24],{"name":18,"type":19},"ARTEX","product",{"name":21,"type":19},"PentAGI",{"name":23,"type":19},"Agent Zero",{"name":25,"type":26},"GitGuardian","vendor","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":27,"icon":29,"name":30,"slug":31},null,"Threat Intelligence","threat-intelligence",[33,38,43],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":44},{"id":27,"icon":29,"name":30,"slug":31},[46,49],{"type":47,"value":18,"context":48},"malware","AI hacking framework family",{"type":47,"value":21,"context":50},"AI hacking framework",[25,18,21],{"controls":53,"vendors":140},[54,83,112],{"slug":55,"name":56,"problem":57,"products":58},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"sailpoint","SailPoint","\u002Fvendor-logos\u002Fsailpoint.png","human-fabric","SailPoint Human Fabric","https:\u002F\u002Fwww.sailpoint.com\u002Fproducts\u002Fhuman-fabric","Identity governance platform, the successor to Identity Security Cloud: lifecycle management, access requests and continuous access reviews.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"slug":84,"name":85,"problem":86,"products":87},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[88,96,104],{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"censys","Censys","\u002Fvendor-logos\u002Fcensys.png","censys-external-exposure-management","Censys External Exposure Management","https:\u002F\u002Fcensys.com\u002Fsolutions\u002Fexternal-exposure-management","External attack surface discovery based on continuous internet-wide scanning.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":113,"name":114,"problem":115,"products":116},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[117,125,132],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":127,"url":130,"description":131},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",[141],{"slug":142,"name":25,"logo_path":143,"roles":144},"gitguardian","\u002Fvendor-logos\u002Fgitguardian.png",[145],"reported_by",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":156},"ai-hacking-tools-left-exposed-online-without-authentication","AI Hacking Tools Left Exposed Online Without Authentication","AI-powered penetration testing frameworks including ARTEX, PentAGI, and Agent Zero were discovered running on internet-accessible servers, with management consoles left completely open and unauthenticated. This means anyone on the internet could potentially commandeer these powerful automated hacking tools and direct them against arbitrary targets, effectively turning legitimate security research tools into attacker infrastructure. The problem is compounded by the proliferation of open-source forks, making it difficult to contain once abuse begins. Organizations deploying any internet-facing tool — especially one with offensive capabilities — must enforce authentication and restrict access by default, treating exposure of such tools as a critical security failure.",[151,152,153,154,155],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-17: Remote Access","NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed","NIS2 Article 21(2)(i)",{"NIS2 Article 21(2)(i)":157,"NIST SP 800-53 AC-17: Remote Access":158,"CIS Control 12: Network Infrastructure Management":159,"CIS Control 4: Secure Configuration of Enterprise Assets and Software":160,"NIST CSF 2.0 PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed":161},"NIS2 Article 21(2)(i) requires human resources security, access control, and asset management practices that would have mandated authentication controls and an asset inventory preventing these tools from being exposed without oversight.","AC-17 requires that remote access to systems be authorized, encrypted, and controlled, which would have prevented unauthenticated internet access to these hacking framework consoles.","Placing powerful offensive tools directly on internet-accessible servers without network restrictions violates the principle of limiting exposure, which CIS Control 12 covers by requiring controlled management of network boundaries and access paths.","These frameworks were deployed with no authentication — a default-insecure configuration — which CIS Control 4 directly addresses by requiring secure baseline configurations for all assets before deployment.","The absence of any authentication on management interfaces reflects a complete failure to enforce access authorization, which this control specifically requires."]