China-aligned Storm-0940 used ARTEX AI agents in ConnectWise Cloud Backup supply-chain attack on Microsoft 365 tenants
Microsoft attributed the recent supply-chain attack on ConnectWise customers' Microsoft 365 environments to Storm-0940, a China-state aligned actor active since 2021. Since at least September 2026 the group has used the open-source agentic AI penetration testing framework ARTEX to automate attacks against hundreds of organizations worldwi…