Recent PHP disclosures and published investigations into ARTEX indicate that AI is being used across vulnerability research and offensive operations. Darktrace telemetry identified failed authentication activity involving infrastructure that Microsoft later publicly associated with the ARTEX campaign.