Technology
Microsoft ties the ConnectWise breach to a Chinese crew running AI agents
Microsoft attributed a supply-chain intrusion at IT management vendor ConnectWise to Storm-0940, a China-aligned group it says used ARTEX, an open-source AI penetration-testing framework, to automate reconnaissance and credential attacks. Stolen application credentials let the attackers authenticate against more than 2,250 Microsoft 365 tenants, at times at 2,900 attempts a minute, and in some environments reach privileged cloud access in under three hours. ConnectWise has paused its cloud backup service.