{"type":"post","id":"fbi-flash-warns-of-artex-an-open-source-3e4b9a","slug":"fbi-flash-warns-of-artex-an-open-source-3e4b9a","title":"FBI FLASH warns of ARTEX, an open-source LLM agent framework weaponized for automated intrusions","description":"The FBI has published a FLASH warning that attackers are using ARTEX, an open-source, LLM-driven penetration-testing framework, to automate intrusion campaigns.","retrieval_nugget":"The FBI has published a FLASH warning that attackers are using ARTEX, an open-source, LLM-driven penetration-testing framework, to automate intrusion campaigns. For security teams, the key shift is operational: agent orchestration can compress reconnaissance, exploitation and privilege escalation into hours, while the FBI’s recommendations emphasize exposed business systems and identity controls.","published_at":"2026-11-14","updated_at":"2026-11-14","record_date":"2026-11-14","date_kind":"published_at","topics":["anthropic","claude"],"entities":["Federal Bureau of Investigation","ARTEX","ARTEX PRO","ConnectWise Cloud Backup","Anthropic Claude","OpenAI GPT","DeepSeek Flash"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"The FBI details ARTEX’s spread and impact, including attacks affecting about 67,000 people, access to more than 2,250 tenants, and over 1,600 exposed consoles.","prior_refs":["https://newruntime.com/posts/censys-finds-1-465-publicly-exposed-artex-ai-38ea2e/","https://newruntime.com/posts/the-hijacked-cairn-how-exposed-ai-pentesting-panels-6d112b/"],"source_url":"https://www.ic3.gov/CSA/2026/261113.pdf","source_urls":["https://www.ic3.gov/CSA/2026/261113.pdf"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:fbi-flash-warns-of-artex-an-open-source-3e4b9a","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/fbi-flash-warns-of-artex-an-open-source-3e4b9a/","markdown":"https://newruntime.com/posts/fbi-flash-warns-of-artex-an-open-source-3e4b9a.md","json":"https://newruntime.com/posts/fbi-flash-warns-of-artex-an-open-source-3e4b9a.json"},"markdown_url":"https://newruntime.com/posts/fbi-flash-warns-of-artex-an-open-source-3e4b9a.md","next_reads":[{"type":"topic","path":"/topics/anthropic/","url":"https://newruntime.com/topics/anthropic/","title":"Anthropic","reason":"Explore the anthropic topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/anthropic.md","json_url":"https://newruntime.com/topics/anthropic.json"},{"type":"topic","path":"/topics/claude/","url":"https://newruntime.com/topics/claude/","title":"Claude","reason":"Explore the claude topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/claude.md","json_url":"https://newruntime.com/topics/claude.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}