{"data":{"id":"5aff96ec-6c26-4d81-b684-234210daecf8","title":"ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors","summary":"Wiz Research reports an actor using tooling tied to ARTEX, an open-source autonomous penetration-testing framework, to target IT and software vendors throughout October 2026. The activity focuses on identity providers (Okta, Entra, Cognito) and abuse of Microsoft 365 integrations, overlapping with Microsoft's report on Storm-0940, a Chinese state-aligned actor linked to a supply-chain attack involving stolen vendor credentials.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://www.wiz.io/blog/artex-in-the-wild-storm-0940-expands-targeting-of-it-and-software-vendors","publishedAt":"2026-10-22T13:05:31.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["ARTEX","Okta","Entra","AWS Cognito","Microsoft 365"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-22T13:05:31.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}