RegulationHigh importance
Update: Censys finds 1,465 ARTEX consoles exposed on the internet (~815 distinct deployments)
Silas Cutler (Censys, 05/11/2026) reports 1,465 hosts with an exposed ARTEX console (measurement ~03–04/11); ~650 in two identical hosting blocks, leaving ~815 distinct deployments. ARTEX is an open-source LLM autonomous pentest framework (GitHub Autumn-27/ARTEX, Jul/2026; later closed). 155 hosts (10.6%) have another Censys threat (Vshell, Cobalt Strike, Adaptix C2 etc.). The post ties this to use attributed by CrowdStrike (Korean finance) and Microsoft (Storm-0940/ConnectWise). New fact vs the VAPOR PANDA story of the 01/11 edition: the scale of public console exposure.
Published in edition no. 15 of Noticiário do Joãozinho ·
Translated by Joãozinho AI from the original Brazilian Portuguese edition. Facts, numbers and sources are the same as in the original; quotes, video titles and source names stay in their original language. Read the original in Portuguese
Original source
https://censys.com/blog/artex-agentic-asbestos/