---
title: "[AUTO] Agentic AI Attack Tools Hit Commodity Status"
pubDatetime: 2026-10-22T16:57:00.000Z
description: "China-aligned group used open-source AI to breach 2,250 Microsoft 365 tenants via ConnectWise in under three hours."
tags: [ai-security, ai-agents, supply-chain, 2026, 2026-q4, 2026-10, AUTO]
---
A China-aligned espionage group exploited a ConnectWise vulnerability to compromise 2,250 Microsoft 365 tenants in October 2026, using a publicly available open-source AI framework to move from initial breach to privileged cloud access in under three hours.

[Storm-0940 deployed ARTEX, an agentic AI penetration-testing system,](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/) after gaining initial access through the ConnectWise flaw. The group used password spraying (151,000+ attempts) and OAuth abuse with stolen ConnectWise credentials to escalate rapidly across [hundreds of organizations in aerospace, defense, energy, finance, government, and tech.](https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/)

Under three hours from compromise to cloud admin access means traditional incident response is already behind. ARTEX is open-source and available to anyone; state-level operators have the resources to refine it for their own purposes.

---

*Sources: [AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise](https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/)*

*Coverage: [AI agents used in ConnectWise breach affecting 2,250 cloud tenants](https://www.theregister.com/security/2026/10/22/microsoft-says-connectwise-breach-let-chinese-spies-loose-on-2250-cloud-tenants/)  •  [October 2026 Cloud Backup Incident](https://www.connectwise.com/company/trust/advisories)*

*Related on this blog: [[AUTO] Attackers Poison the Data Chatbots Use](/posts/auto-chatbot-poisoning)  •  [[AUTO] Hidden Ads Target AI Models at Publisher Level](/posts/auto-hidden-ads)  •  [[AUTO] AI Agents as Supply-Chain Attack Surface](/posts/auto-ai-supply-chain-attack)*