Cisco Talos reports growing criminal use of AI-enabled penetration-testing frameworks, including ARTEX, which automates planning and attack tasks. Talos cites CrowdStrike and Microsoft attributions linking ARTEX activity to several threat groups and campaigns.