Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
2026-10-22T20:51:36Z•65fa755eef8a66569a77a037dc494f1d8c98fb030a7b4c6670c00de15a48e750
CVE-2026-113380AI safetyAI-assisted cyberattackAPTARTEXChina-linked threat actorConnectWiseDeepSeekMicrosoft 365PHPPegasus spywareSafePaySignalStorm-0940VPN compromisecloud securitycredential theftdata breachdouble extortionmobile surveillanceransomwareremote code executionsatellite securitysupply-chain compromisezero-day exploitation
What happened
Security news covering China-linked Storm-0940 activity involving a ConnectWise Cloud Backup supply-chain compromise and AI-assisted attacks against Microsoft 365 tenants; a critical Signal calling flaw (CVE-2026-113380) that may leave microphones or cameras active; exploitation of critical PHP RCE vulnerabilities before disclosure; SafePay ransomware targeting more than 600 organizations; satellite proximity concerns; AI-agent oversight failures; U.S. restrictions on DeepSeek in federal systems; Pegasus spyware targeting a Serbian university rector; and a Nikkei breach affecting over 1.8M non
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 65fa755eef8a66569a77a037dc494f1d8c98fb030a7b4c6670c00de15a48e750
- Enrichment time
- 2026-10-22T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.