Microsoft attributes ConnectWise supply chain attack to China-linked Storm-0940

Microsoft has linked the ConnectWise supply chain attack to China-linked threat actor Storm-0940, which used an AI-enabled penetration-testing tool to automate attacks against over 2,200 tenants. This marks a notable escalation in AI-assisted cyber operations, indicating a shift toward scalable, automated intrusion techniques. The full scope of compromised tenants and data remains unclear, but the scale suggests significant supply chain risk.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works