ARTEX hacking harness reportedly ran large-scale attacks on DeepSeek V4.1 Flash
The post claims the one-person open-source ARTEX harness, paired with the Oct 17 V4.1 Flash 1017 release, powered breaches at Korean banks, ~20 Japanese firms and 2,250+ M365 tenants without zero-days.
ARTEX: Harness of the year 🏆 ??? A one-person side project out of China. Planner + worker agents + an asset graph. Open-sourced in July, 12,000+ forks by October. Console runs in English, Korean, Mandarin, Spanish, Japanese. Already tied to breaches at Korean banks, ~20 Japanese companies, and a Storm-0940 sweep of 2,250+ Microsoft 365 tenants. No zero-days needed. Those ops ran on DeepSeek V4.1 Flash. On Oct 17 DeepSeek shipped V4.1 Flash 1017: better at agentic tasks, faster, cheaper, open weights. At frontier level for cyber security tasks. ARTEX + DS 1017 is potentially the most powerful tool yet for hacking at scale. Self-hosted, there's no API provider in the loop to notice. The harness matters as much as the model.
This post quotes another post: x.com/hsu_steve/status/2113904716966936805