/
initial_access_vector:exploit_public_facing × victim_sectors:software × victim_sectors:military × limpar

Resultados

2 casos · pág. 1/1

infosecurity-magazine.com · critical

Storm-0940 uses ARTEX agentic AI framework to compromise ConnectWise Microsoft 365 tenants and target downstream customers

Microsoft assesses that the China-aligned actor Storm-0940 used the agentic AI penetration testing framework ARTEX to compromise the Microsoft 365 tenants of ConnectWise, then pivoted to its downstream customers. The campaign began in September 2026 and targeted hundreds of organizations worldwide across aerospace and defense, energy, fin…

thehackernews.com · critical

Storm-0940 uses ARTEX agentic AI framework in ConnectWise Cloud Backup supply chain attack on hundreds of organizations

Microsoft attributed the recent supply chain compromise of the ConnectWise Cloud Backup application to Storm-0940, a China state-aligned actor. The actor used ARTEX, a Go-based agentic AI penetration testing framework, to automate reconnaissance, password spraying and OAuth application abuse at "machine speed" against hundreds of organiza…