MisuseSerious1 sourceFirst seen
An AI agent knocked on 2,250 corporate cloud tenants faster than anyone could read the alerts
Ourtake
Turns out the 'always-on digital assistant' pitch works just as well for the other side.
What happened
Microsoft said a Chinese-linked threat actor, Storm-0940, used stolen ConnectWise credentials and an agentic AI tool called ARTEX to attack Microsoft 365. The tool reportedly made 2,900 sign-in attempts per minute and reached 2,250 corporate tenants across aerospace, defense and finance within hours.