/
initial_access_vector:valid_accounts × victim_sectors:technology × victim_sectors:software × limpar

Resultados

3 casos · pág. 1/1

wiz.io · high

Storm-0940 actor uses ARTEX AI pentest agent against IT and software vendors' identity providers and M365 integrations

Throughout October 2026, Wiz observed an actor using tooling associated with ARTEX, an open-source autonomous AI penetration-testing framework, against multiple IT and software vendors. The activity targeted identity providers (Okta, Entra ID, AWS Cognito) and Microsoft 365 integrations, with repeated attempts to bypass authentication, en…

Storm-0940 technology software
securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…

Storm-0940 aerospace automotive
darkreading.com · · 7 fontes · 7 atualizações critical

Storm-0940 abuses ARTEX AI agents and stolen ConnectWise Cloud Backup app credentials to hit 2,250+ Microsoft 365 tenants

Microsoft attributes the supply-chain compromise of ConnectWise Cloud Backup (formerly SkyKick) to Storm-0940, a China state-aligned actor active since at least 2021. The group has used the agentic AI penetration-testing framework ARTEX since at least September 2026 against hundreds of organizations worldwide (cyberscoop.com, thehackernew…

Storm-0940 TAG-217 aerospace defense