Censys

Headlines · 2

1. 4d
   Censys Finds 800+ Passwordless Artex AI Pentest Deployments

   Censys found more than 800 Artex deployments accessible from the internet without passwords, according to TechCrunch; TechRadar reported an updated scan of 1,465 exposed hosts. Artex is an open-source autonomous penetration-testing tool that combines AI agents with reconnaissance, and some exposed instances also ran offensive tools such as Cobalt Strike, Vshell, or Adaptix C2. Microsoft and CrowdStrike have linked Artex use to attacks involving South Korean financial institutions and ConnectWise Cloud Backup customer environments, while Censys said not every exposed instance was malicious.

   TechCrunch AI · 🔥 4
2. 7d
   PHP2Shell post-mortem says maintainers knew of flaw for two years

   Tom’s Hardware reports that OpenAI’s GPT 5.6-Sol discovered the critical PHP vulnerabilities during the week of October 19, 2026, while a PHP Foundation post-mortem says a small team of maintainers had known about the issue for two years. The flaw can enable remote code execution when an attacker knows the target’s exact PHP version and build, and exploitation is being observed through the PHP2Shell exploit. Patches and backports are available, but Tom’s Hardware cites Censys estimates showing that roughly 29 million installations remained apparently unpatched, while version-reporting changes make the total uncertain.

   Tom’s Hardware · 🔥 0

Experience and discussion from the community

Share my Censys experienceAsk about Censys