China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack
At a glance
- Severity
- Medium
- Used in attacks
- No flaws named
- Vendors and products
- Microsoft
- Industries
- Manufacturing
- Reported by
- 1 outlet
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident, Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework that was made closed-source in the wake of its abuse against South Korean financial institutions, to speed up scanning and…
We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.
Fastnexa security experts
Dealing with this in your own company?
If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.
Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →
Coverage
One outlet has carried this so far.
2026-10-22 04:21 UTC
Related stories
- PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
The Register · 2026-10-21
- Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected
BleepingComputer · 2026-10-21
- Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
The Hacker News · 2026-10-21
- CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers
BleepingComputer · 2026-10-21
- Oracle Corporation security advisory (AV26-1071)
Canadian Centre for Cyber Security · 2026-10-21