A nation-state group used an open-source AI pentest agent as part of a supply-chain compromise, Microsoft says. In a October 21, 2026 threat-intelligence post, Microsoft attributes the compromise of ConnectWise Cloud Backup to Storm-0940, a China-state-aligned actor, and says the group used the open-source ARTEX agent framework. The Injection‘s week-43 roundup, summarizing Microsoft’s report, says the actor attempted sign-ins to over 2,250 Microsoft 365 tenants.
Quick Take
- Who: Storm-0940, which Microsoft describes as China-state-aligned.
- What: A compromise of ConnectWise Cloud Backup, reported as a supply-chain incident, with ARTEX used to automate parts of the attack.
- Scale: Microsoft’s reporting, as summarized by The Injection, includes attempted sign-ins to more than 2,250 Microsoft 365 tenants.
- Why it matters: The same ARTEX framework has since shown up in Microsoft’s later reporting on stolen GitHub secrets and Azure Key Vault theft, which i10x covers separately.
What happened
ARTEX is an open-source agentic offensive framework: an operator sets an objective, and the agent chains common pentest tools to pursue it. Microsoft says Storm-0940 used that style of automation in the ConnectWise Cloud Backup case, not just as a curiosity in a lab. ConnectWise Cloud Backup sits in a privileged place in a customer’s Microsoft 365 environment, which is why a compromise there is treated as a supply-chain event rather than a single-tenant intrusion.
Microsoft’s October 21 blog is the primary public account. i10x has not independently confirmed the tenant count or the exact ConnectWise components that were abused; those figures come from Microsoft and from contemporaneous summaries of that post.
What organizations were told to do
Microsoft’s guidance in this campaign, echoed in later ARTEX reporting, is operational rather than a single CVE patch: disable affected ConnectWise application connections where instructed, preserve evidence, and review service-principal sign-ins and Microsoft Graph activity. The Injection’s summary of the October 21 post advises organizations to “disable affected ConnectWise application connections, preserve evidence, and review service-principal sign-ins and Microsoft Graph activity from October 15, 2026 onward.”
What it means
For Microsoft 365 and MSP customers
If your organization uses ConnectWise Cloud Backup or similar backup integrations, this is a vendor-risk event, not only a Microsoft 365 hardening exercise. Review the vendor’s own advisories and any application consents or service principals that the product created in your tenant.
For defenders
The story is not that an AI “hacked the cloud by itself.” Microsoft still describes a human-directed actor using an agent to go faster. The practical change is speed and volume: thousands of sign-in attempts, and later the same tooling turning leaked GitHub secrets into Key Vault access in minutes.
For the AI security desk
Storm-0940’s ConnectWise campaign is one of the clearest 2026 examples of an agentic pentest framework crossing from research and crimeware demos into a named nation-state supply-chain incident. It is also the context for the ARTEX secret-hunting activity Microsoft described on November 5.
About the analysis
Researched and written with AI assistance under the editorial responsibility of the i10X News team. The title image is an AI-generated illustration. Read our AI Use Policy. Spotted an error? Request a correction.
This i10x report is based on Microsoft’s October 21, 2026 Security Blog post on Storm-0940 and ARTEX, and on The Injection’s week-43 summary of that report. i10x did not review ConnectWise telemetry and did not independently verify the 2,250-tenant figure.
