initial_access_vector:valid_accounts × victim_sectors:aerospace × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

sentinelone.com · há 3h exploit público critical

Weekly roundup: China-linked ARTEX agentic AI hits ConnectWise Cloud Backup; PHP2Shell patched; Interpol Serengeti III

This SentinelOne weekly roundup (Week 43, 2026) covers several separate stories. The most significant is a suspected Chinese state-aligned actor using ARTEX, a Go-based multi-agent LLM penetration testing framework, to compromise ConnectWise Cloud Backup and pivot into downstream Microsoft 365 tenants. The actor reportedly reached privile…

CVE-2026-109618 CVE-2026-109619 aerospace defense

darkreading.com · há 23h · 7 fontes · 7 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…

Storm-0940 TAG-217 aerospace defense