日本企業狙う不正アクセスにAI 攻撃者が自立型侵入テスト「ARTEX」を使用 GMOイエラエ
2026-10-20
ITmedia
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
A Chinese-developed AI agent, ARTex, was used to autonomously identify vulnerabilities and conduct cyberattacks targeting Japanese companies, resulting in data breaches at at least eight firms. The attacks, confirmed by security firms, also targeted sectors like finance and retail, and similar AI-driven attacks affected Korean financial institutions.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly states that attackers used an AI system (ARTEX) to conduct unauthorized access attacks that resulted in confirmed data breaches and information leaks in multiple Japanese companies. The AI system was used maliciously to automate and enhance the attack process, including vulnerability discovery and evasion of defenses. The harms are realized and significant, including breaches of information security and privacy, which constitute violations of rights and harm to communities. The AI system's role is pivotal in enabling these attacks. Hence, this is an AI Incident rather than a hazard or complementary information.[AI generated]