Covered by 3 outlets — first reported by Infosecurity Magazine, Oct 22, 11:00 UTC
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
In brief
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. The Windows giant revealed this week that the attackers, tracked as Storm-0940, used an open source AI penetration-testing tool called ARTEX to automate attacks against Microsoft 365 environments.
From The Register Security's coverage.
Continue reading
3 outlets, in the order they reported it.
Infosecurity MagazineFirst report
Microsoft: Chinese State Actor Used AI to Compromise ConnectWise Tenants
Microsoft said it has observed threat actor activity in multiple ConnectWise customer environments, with the attackers leveraging the ARTEX agentic AI platform
The Register Security
Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says.
Dark Reading
Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.
Explained
The technology and terms in this story. Learn more