Microsoft reported on 21 October that China-aligned hacking group Storm-0940 used an AI-powered penetration testing framework to automate attacks against organisations worldwide as early as September 2026. The company also assessed that Storm-0940 was responsible for a supply chain compromise involving a multi-tenant application associated with ConnectWise Cloud Backup.
The findings highlight the risks of interconnected business systems, where compromised third-party application access can expose customer environments. Microsoft said the campaign targeted hundreds of organisations across multiple industries, although most targeting attempts were unsuccessful.
