High · 1 source · latest 2h

ARTEX AI pentest tool abused to steal gaming logins and Apple signing certificates

AI SECURITYCheck Pointredteam/daily · 1 source

Severity: High
Sources: 1

What happened

Criminals are using ARTEX, a tool first built to help security teams test their own systems, to break into websites with little human help. In the cases studied, the automated agents stole over 190,000 gaming logins and hundreds of Apple app-signing certificates, though only three of those certificates still worked.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Find and rotate any exposed secrets, including passwords, keys and certificates.
Remove hardcoded credentials from front-end and JavaScript code.
Require authentication on every API endpoint.
Test internet-facing systems and watch for sudden bursts of requests.

Written by AI from the sources, checked against them

Read the full story at the source