ARTEX AI agent closed-source after Korean bank hack | The Straits Times

Genuinely heartening news from the open-source frontier: an AI agent that got itself linked to cyberattacks on South Korean banks is being taken off the shelves, which is roughly the security posture of a pub that removes the dartboard after someone's been glassed with a pint. The developer behind ARTEX goes by Autumn-27 on GitHub — no company, no surname, no incident-response team, just a handle, which is precisely the accountability structure you want underneath a tool with a bank-shaped footprint. The Straits Times reports that no further versions will be released to the public. Excellent. That'll fix it.

But the line that deserves a small plaque is the accompanying promise: no maintenance support will be provided. Rarely has a sentence done so much quiet work. It means whoever already has a copy has it forever, and that the person who built the thing has formally resigned from its future. Consider the contrast with our last tour of the AI misuse beat, OpenAI's false-front takedown: all the resources in the world, a published report, and the problem still requires vigilance. Autumn-27 had none of that infrastructure and reached the same conclusion by simply stopping. It is the cheapest responsible disclosure in the history of the genre, and it arrives exactly when these measures always arrive: after.

Note what is missing from the report. No regulator, no bank, no police force, no fine, no hearing — just a GitHub note and a journalist to transcribe it. The entire governance apparatus built to catch exactly this scenario, the summits and the frameworks and the voluntary commitments, never touched it. The tool was linked to attacks on South Korean banks and the corrective action was, in effect, a man closing a door after the horse had already sprinted past three national borders. One can only assume the responsible-use policy was 'please'.