Microsoft Links ConnectWise Breach to China-Linked Group Using AI Pentesting Tool ARTEX
2026-10-23T02:51:36Z•8b7f0b6a38900cf2a1ea9c27a2099ce2de7808feb77382da6fde9912fa8f93ce
CVE-2026-113380AI safetyAI-assisted attacksAPTARTEXCISAChina-linked threat actorConnectWiseFBIMicrosoft 365NSO GroupPHPPegasusSafePaySignalStorm-0940cloud securitycredential theftdata breachdouble extortionransomwareremote code executionsatellite securityspywarezero-day exploitation
What happened
The feed reports major cybersecurity developments including a China-linked Storm-0940 campaign using stolen ConnectWise credentials and the AI pentesting tool ARTEX to target Microsoft 365 tenants; a critical Signal calling flaw that could leave microphones or cameras active after hang-up; exploitation of critical PHP remote-code-execution vulnerabilities before public disclosure; SafePay ransomware attacks affecting more than 600 organizations; Pegasus spyware targeting a Serbian university rector; and a breach of Nikkei involving over 1.8 million records. It also covers satellite proximity,.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8b7f0b6a38900cf2a1ea9c27a2099ce2de7808feb77382da6fde9912fa8f93ce
- Enrichment time
- 2026-10-23T02:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.