Microsoft: Storm-0940 used agentic AI framework ARTEX to attack hundreds of orgs
basedjensen · x · 2026-10-22
Microsoft Threat Intelligence assesses that China state-aligned actor Storm-0940 used the agentic AI pentesting framework ARTEX to automate attacks on hundreds of organizations globally, and was behind the recently disclosed ConnectWise multitenant app supply chain compromise. ARTEX accelerated abuse of already-authorized applications to authenticate into targets without interactive sign-ins, with AI-accelerated reconnaissance, credential changes, and privilege modification for persistent access. Full analysis on the Microsoft Security Blog.
More from Safety
- ML pioneer Dietterich: OpenAI's agents ran for months with essentially no supervision — tdietterich · 2026-10-22
- NCSC advisory details the two PHP flaws enabling unauthenticated remote code execution — LuizaJarovsky · 2026-10-22
- AI-discovered critical PHP vulnerabilities leaked, UK NCSC urges immediate patching — LuizaJarovsky · 2026-10-22
- eMudhra mess exposes all the software that ships without auto-updates — kuza55 · 2026-10-22
- Dev jokes that their SSL root cert's private key is just '5' — kuza55 · 2026-10-22
- GitLab hit by CVSS 10.0 unauthenticated RCE, patches shipped for releases back to 2014 — jd_pressman · 2026-10-22