feat: ARTEX(2026) threat narrative — common banner + Standards tab Why-now section (KO/EN)

app.py

@@ -521,6 +521,31 @@ def area_help(lang):
     return '<div style="font-weight:700;color:#2e1065;font-size:13px;margin:6px 0 4px">' + head + '</div>' + grid
 
 
+def _artex_section(lang):
+    if lang == "ko":
+        head = "🚨 왜 지금인가 — ARTEX 사태 (2026)"
+        bullets = ["오픈소스 <b>AI 침투 에이전트 ‘ARTEX’</b>(DeepSeek 기반)가 정찰·침투·탈취를 <b>자동</b> 수행",
+                   "국내 <b>은행 7곳 이상</b> 침해, 약 <b>6.8만 건</b> 개인정보 유출 — <b>미패치 내부 애플리케이션</b>이 진입점",
+                   "Microsoft: 중국계 <b>Storm-0940</b>이 ARTEX로 <b>MS365 2,250 테넌트</b> 로그인 시도 / 대만 <b>91APP</b> 주문DB 침해",
+                   "공격 표면 = <b>웹·인프라 위생</b> + <b>AI 에이전트 권한·도구 오남용</b> (이중용도 도구의 악용)"]
+        resp = "치토스 대응: <b>웹서비스 · AX 인프라 · AI 모델 · AI 에이전트(AX-RAY)</b> 4대 진단 + 금융보안원 17항목 레드티밍으로 공격·방어 양면을 점검합니다."
+        src = "출처(2026): bankinfosecurity.asia · therecord.media · techtimes.com"
+    else:
+        head = "🚨 Why now — the ARTEX incident (2026)"
+        bullets = ["The open-source <b>AI penetration agent “ARTEX”</b> (DeepSeek-based) runs recon, breach and exfiltration <b>autonomously</b>",
+                   "<b>7+ Korean banks</b> breached, ~<b>68,000 records</b> leaked — <b>unpatched internal applications</b> were the entry point",
+                   "Microsoft: China-aligned <b>Storm-0940</b> used ARTEX against <b>2,250 MS365 tenants</b> / Taiwan's <b>91APP</b> order DB breached",
+                   "Attack surface = <b>web/infra hygiene</b> + <b>AI-agent privilege & tool misuse</b> (abuse of a dual-use tool)"]
+        resp = "CHITOS response: four diagnoses — <b>Web Service · AX Infra · AI Model · AI Agent (AX-RAY)</b> — plus FSI 17-item red-teaming, covering both attack and defense."
+        src = "Sources (2026): bankinfosecurity.asia · therecord.media · techtimes.com"
+    lis = "".join('<li style="margin:3px 0">%s</li>' % b for b in bullets)
+    return ('<div style="border:1px solid #fecaca;background:#fef2f2;border-radius:12px;padding:13px 16px;margin-bottom:14px">'
+            '<b style="color:#b42318;font-size:14px">' + head + '</b>'
+            '<ul style="margin:8px 0 6px;padding-left:18px;font-size:12.5px;color:#374151;line-height:1.6">' + lis + '</ul>'
+            '<div style="font-size:12.5px;color:#2e1065;background:#f5f3ff;border-radius:8px;padding:8px 11px;margin-top:4px">🛡 ' + resp + '</div>'
+            '<div style="font-size:10.5px;color:#9ca3af;margin-top:6px">' + src + '</div></div>')
+
+
 def guideline_html(lang):
     ko = (lang == "ko")
     def chk(items):
@@ -586,6 +611,7 @@ def guideline_html(lang):
         '<div style="font-size:12px;letter-spacing:4px;color:#d6bcff;font-weight:800">C H I T O S · ' + _L("준거 체계", "Standards", lang) + '</div>'
         '<div style="font-size:20px;font-weight:800;margin-top:6px;color:#fff">' + hero_t + '</div>'
         '<div style="color:#e9d5ff;font-size:12.5px;margin-top:4px">' + hero_s + '</div></div>'
+        + _artex_section(lang)
         + _h2(h_map)
         + '<table style="width:100%;border-collapse:collapse"><tr>'
           '<th style="border:1px solid #e4e9ef;padding:8px;background:#f5f3ff;text-align:left">' + th[0] + '</th>'
@@ -612,6 +638,19 @@ def guideline_html(lang):
     return html_out
 
 
+def threat_banner(lang):
+    if lang == "ko":
+        t = ("⚠ <b>2026년, 오픈소스 AI 해킹 에이전트 ‘ARTEX’</b>가 국내 은행 7곳 이상을 침투해 약 <b>6.8만 건</b>의 개인정보가 유출됐습니다 "
+             "(<b>미패치 내부 시스템</b>이 진입점 · MS365 2,250 테넌트·대만 금융까지 확산). "
+             "공격이 AI 에이전트로 자동화된 시대 — 방어도 AI로. 치토스는 <b>웹·인프라·AI 모델·AI 에이전트</b>를 함께 진단합니다.")
+    else:
+        t = ("⚠ <b>In 2026 the open-source AI hacking agent “ARTEX”</b> breached 7+ Korean banks, leaking ~<b>68,000 records</b> "
+             "(entry point: <b>unpatched internal systems</b> · spread to 2,250 MS365 tenants and finance in Taiwan). "
+             "Attacks are now automated by AI agents — so is defense. CHITOS diagnoses <b>web, infra, AI models and AI agents</b> together.")
+    return ('<div style="background:#1b0f2e;border:1px solid #7c3aed;border-radius:12px;padding:12px 16px;margin:4px 0 2px;'
+            'color:#f3e8ff;font-size:12.5px;line-height:1.55">' + t + '</div>')
+
+
 def header_html(lang):
     return ('<div id="title" style="padding:10px 0 4px"><div style="font-size:13px;letter-spacing:5px;color:#8b5cf6;font-weight:800">C H I T O S</div>'
             '<h1 style="margin:6px 0;color:#2e1065">' + _L("보안 · SEO · AI가시성 진단", "Security · SEO · AI-Visibility Diagnosis", lang) + '</h1>'
@@ -629,7 +668,7 @@ def relang(label, last_scan, last_deep):
     lang = "en" if str(label).startswith("Eng") else "ko"
     o1u = gr.update(value=build_report(last_scan, deep=False, lang=lang, show_upsell=True)) if last_scan else gr.update()
     o2u = gr.update(value=build_report(last_deep["d"], deep=True, verified_email=last_deep.get("email"), lang=lang)) if last_deep else gr.update()
-    return (lang, gr.update(value=label), header_html(lang), desc1(lang), desc2(lang), desc3(lang),
+    return (lang, gr.update(value=label), header_html(lang), threat_banner(lang), desc1(lang), desc2(lang), desc3(lang),
             area_help(lang), guideline_html(lang), footer_html(lang), o1u, o2u)
 
 
@@ -639,6 +678,7 @@ with gr.Blocks(title="CHITOS 인스턴트 스캔", css=CSS, theme=gr.themes.Soft
     last_scan = gr.State(None)
     last_deep = gr.State(None)
     hdr = gr.HTML(header_html("ko"))
+    g_threat = gr.HTML(threat_banner("ko"))
     with gr.Row():
         lang_radio = gr.Radio(["한국어", "English"], value="한국어", label="🌐 언어 / Language", min_width=260)
     with gr.Tabs():
@@ -674,7 +714,7 @@ with gr.Blocks(title="CHITOS 인스턴트 스캔", css=CSS, theme=gr.themes.Soft
     g_ft = gr.HTML(footer_html("ko"))
 
     _ins = [lang_radio, last_scan, last_deep]
-    _outs = [lang_state, lang_radio, hdr, g_d1, g_d2, g_d3, g_ah, g_gl, g_ft, o1, o2]
+    _outs = [lang_state, lang_radio, hdr, g_threat, g_d1, g_d2, g_d3, g_ah, g_gl, g_ft, o1, o2]
     lang_radio.change(relang, _ins, _outs)
     demo.load(relang, _ins, _outs,
               js="() => [ (navigator.language||'en').toLowerCase().startsWith('ko') ? '한국어' : 'English', null, null ]")