Microsoft’s global CISO is urging governments to rein in Artex and similar AI-driven pen testing security frameworks — but some security experts argue that regulation would hobble defenders while doing little to curb attacks.
In a LinkedIn post this week, Igor Tsyganskiy, executive vice president and global CISO at Microsoft, warned that Artex’s use “is spreading like fire” across the internet, calling it “extremely dangerous” in the wrong hands.
“Most frequently, those who use AI models for cyber offense have very little understanding of the limitations and unpredictable behavior of such models,” Tsyganskiy wrote. “I urge policymakers across the world to urgently regulate the release and use of such dangerous frameworks, especially in open source form.”
Artex is an LLM-driven, multi-agent pen testing framework that — upon receiving a target and high-level goal from a human operator — autonomously plans and executes sophisticated machine-speed attacks. An independent developer using the GitHub handle Autumn-27 released Artex in July as a legitimate, open source pen testing tool.
Within a couple of months, however, threat researchers started linking the framework to major attacks. In response, the developer made the framework closed source, but by then, according to cloud security vendor Wiz, the code had already been forked more than 12,000 times. Threat actors have reportedly used Artex to run sophisticated espionage campaigns, launch attacks on financial firms, scan GitHub for exposed secrets, steal gaming account credentials and more.
As a nondeterministic tool, Artex is uniquely dangerous, Tsyganskiy argued, because it behaves unpredictably and does not always align its actions with the operator’s intent. In other words, Artex is technically easy to use but potentially difficult to control. If, for example, a cybercriminal tasked AI to hack a particular company, Artex could feasibly attack every organization in the same industry. In critical infrastructure sectors — such as healthcare, utilities and banking — the consequences could be dire.
Regulation would backfire, security leaders warn
Threat actors’ access to Artex is cause for major concern, security leaders agreed. But according to Thomas Roccia, founder of threat intelligence firm SecurityBreak and former lead AI security researcher at Microsoft, the genie is already out of the bottle, and regulating or banning it would not limit its criminal use. His team currently uses Artex, along with about 20 other offensive AI tools, to conduct threat intelligence research.
“These tools can be forked, replicated, modified and redistributed in a minute,” Roccia told TechTarget. “Criminals won’t respect a ban, and trying to regulate every offensive framework is an impossible task.”
Others argued that regulation would limit legitimate defensive use, putting defenders at a significant disadvantage.
“Criminals won’t care [about regulations], and the people who actually get hurt are our own red teams,” Boban Kršić, CISO at Fresenius Group, a global healthcare company based in Germany, wrote in response to Tsyganskiy’s LinkedIn post. Rather than fruitlessly trying to disarm the adversary through legislation, defenders would be wise to reinforce their existing security posture, he suggested.
That means nailing the cybersecurity fundamentals that thwart both human- and machine-speed attacks — such as identity and access management, patch management and phishing-resistant MFA — and deploying honeypots to distract and flag adversarial agents.
“Rather than attempting to control the tools, we should focus on our ability to detect and defend against autonomous attacks,” Roccia agreed, adding that regulatory policy could play an important role in establishing and enforcing norms around threat intelligence sharing, automated detection capabilities, cross-border investigations and incident response.
“Another important question is accountability. Who is legally responsible when an autonomous AI agent conducts an unauthorized attack or acts beyond the intended scope?” Roccia said. “I believe these are the important areas where policy could make a difference.”
Alissa Irei is a TechTarget senior reporter covering cybersecurity news.
