Microsoft attributes ConnectWise supply-chain attack to China-state aligned group Storm-0940

Microsoft attributes a supply-chain attack on ConnectWise to Storm-0940, a China-state aligned threat group, which used an agentic AI penetration testing framework to automate attacks, reaching over 2,250 tenants at 2,900 sign-in attempts per minute. This marks a notable escalation in AI-enabled cyber operations, indicating a shift toward automated, large-scale intrusion campaigns. The attribution is based on Microsoft's threat intelligence, and the full scope of the compromise remains under investigation.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works