China-aligned hackers deploy AI agents in massive ConnectWise supply chain attack — agents attempted sign-ins at more than 2,250 Microsoft 365 tenants, with some of the group's attacks reaching privileged access in under three hours | Tom's Hardware
· Source: tomshardware.com
In short
China-state aligned hacking group Storm-0940 used an AI-driven open-source penetration testing tool, ARTEX, to execute a large-scale supply chain attack on ConnectWise, resulting in unauthorized sign-ins at over 2,250 Microsoft 365 tenants. The AI agents automated reconnaissance, password spraying, and OAuth abuse, achieving privileged access within hours, significantly speeding up the attack process and limiting defender response time.
Read Original Article — Read the full article on the publisher’s site.
In the issue of week 43, 2026: Amazon plans faster at scale as one customer cuts 52-week planning time 40%
Tags: cybersecurity, AI, supply chain, automation, penetration testing, Microsoft