Microsoft researchers attributed a recent supply-chain attack on ConnectWise customers to a China-state aligned threat actor known as Storm-0940. The group used an agentic AI penetration testing framework called ARTEX to automate attacks against hundreds of organizations globally. Storm-0940 conducted a password-spraying campaign that resulted in over 151,000 failed logon attempts before compromising ConnectWise Cloud Backup services. The attackers used AI agents to progress beyond authentication to perform reconnaissance and modify application credentials for persistence. ConnectWise temporarily shut down its services but began restoring them in phases on Wednesday.
Read the full story at cyberscoop.com.
Photo: Pexels / Pixabay
