5 casos · pág. 1/1
Microsoft attributes the recent ConnectWise security incident to Storm-0940, a China-linked espionage group active since at least 2021. The actor used the open source AI penetration-testing framework ARTEX and compromised ConnectWise application identities to attempt authentication against more than 2,250 Microsoft 365 tenants. Most attem…
Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…
Microsoft attributed the recent supply-chain attack on ConnectWise customers' Microsoft 365 environments to Storm-0940, a China-state aligned actor active since 2021. Since at least September 2026 the group has used the open-source agentic AI penetration testing framework ARTEX to automate attacks against hundreds of organizations worldwi…
Microsoft assesses that the China-aligned actor Storm-0940 used the agentic AI penetration testing framework ARTEX to compromise the Microsoft 365 tenants of ConnectWise, then pivoted to its downstream customers. The campaign began in September 2026 and targeted hundreds of organizations worldwide across aerospace and defense, energy, fin…
Microsoft attributed the recent supply chain compromise of the ConnectWise Cloud Backup application to Storm-0940, a China state-aligned actor. The actor used ARTEX, a Go-based agentic AI penetration testing framework, to automate reconnaissance, password spraying and OAuth application abuse at "machine speed" against hundreds of organiza…
