Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group

CyberScoop reports multiple significant cybersecurity developments, including a China-aligned Storm-0940 supply-chain attack involving ConnectWise and automated high-volume attacks against Microsoft 365 tenants, emergency PHP patches for two critical vulnerabilities including a CVSS 9.2 flaw, Russian GRU/APT28 espionage targeting NATO and defense-related organizations, and spyware targeting Serbian political critics. The feed also covers fraud prosecutions, federal technology policy, and DeepSeek-related national-security concerns.