China-nexus group Storm-0940 used Microsoft to link to a supply-chain attack on ConnectWise Cloud Backup. The state-aligned group, tracked as Storm-0940, used an agentic AI pen-testing tool called Artex to automate attacks against hundreds of organizations across the globe, according to a report released Wednesday from Microsoft. “Nation-state actors are increasingly targeting the software supply chain, because one trusted connection can open the door to many organizations,” ConnectWise CEO Manny Rivelo, said in a statement confirming the Microsoft findings. “AI now lets them test those connections at what Microsoft calls ‘machine speed.’”
