Description: Microsoft reported that China-aligned hackers used ARTEX, an AI penetration-testing framework, to access customers' Microsoft 365 environments through stolen credentials for ConnectWise's cloud backup services. Agents reportedly changed credentials and privileges in some environments to retain unauthorized access. The activity formed part of a global campaign; the extent of compromise and any data theft remained uncertain.
Entités
Voir toutes les entitésAlleged: Large language model developers , ARTEX developers et AI agent system developers developed an AI system deployed by Threat actors , Storm-0940 , China-linked threat actors , AI agent system deployers et Agentic threat actors, which harmed Microsoft , Enterprises relying on Microsoft 365 and identity services , ConnectWise customers , ConnectWise et Information integrity.
Statistiques d'incidents
ID
1781
Nombre de rapports
2
Date de l'incident
2026-10-15
Editeurs
Daniel Atherton
Rapports d'incidents
Chronologie du rapport
Loading...
As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of the…
Loading...
Oct 21 (Reuters) - A Chinese state-aligned hacking group used an AI-driven penetration testing tool to compromise IT services firm ConnectWise as part of a campaign that targeted hundreds of organizations globally, Microsoft said on Wedne…
Variantes
Une "Variante" est un incident de l'IA similaire à un cas connu—il a les mêmes causes, les mêmes dommages et le même système intelligent. Plutôt que de l'énumérer séparément, nous l'incluons sous le premier incident signalé. Contrairement aux autres incidents, les variantes n'ont pas besoin d'avoir été signalées en dehors de la base de données des incidents. En savoir plus sur le document de recherche.
Vous avez vu quelque chose de similaire ?
