/
initial_access_vector:valid_accounts × victim_sectors:software × criticity:high × limpar

Resultados

2 casos · pág. 1/1

wiz.io · high

Storm-0940 actor uses ARTEX AI pentest agent against IT and software vendors' identity providers and M365 integrations

Throughout October 2026, Wiz observed an actor using tooling associated with ARTEX, an open-source autonomous AI penetration-testing framework, against multiple IT and software vendors. The activity targeted identity providers (Okta, Entra ID, AWS Cognito) and Microsoft 365 integrations, with repeated attempts to bypass authentication, en…

Storm-0940 technology software
securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…

Storm-0940 aerospace automotive