Microsoft says China-state aligned group Storm-0940 used the open-source ARTEX agentic AI framework to abuse compromised ConnectWise Cloud Backup credentials, attempting sign-ins at more than 2,250 Microsoft 365 tenants and in some cases gaining privileged access in under three hours.
