{"data":{"id":"08a27ded-f49c-41ea-bebe-a8b8c3a74ee2","title":"AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise","summary":"Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks against hundreds of organizations starting as early as September 2026. Several attacks gave the actor privileged access to cloud infrastructure, in some cases within 3 hours of initial targeting. Microsoft assesses that Storm-0940 was responsible for the ConnectWise supply chain compromise of a multi-tenant application.","solution":"Customers should review service principal sign-ins, investigate unexpected application credential or privilege changes, and follow ConnectWise's published containment guidance while preserving relevant evidence. Microsoft Defender XDR provides detections and hunting queries for suspicious Microsoft Graph activity.","labels":["security","industry"],"sourceUrl":"https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/","publishedAt":"2026-10-21T18:23:55.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain","other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["ARTEX","Microsoft 365","Microsoft Graph","ConnectWise"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-21T18:23:55.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0010"]}}