Microsoft and ConnectWise have revealed a large-scale supply chain compromise orchestrated by a China-aligned threat actor, which successfully targeted more than 2,250 Microsoft 365 customer tenants. The campaign, attributed to a group known as Storm-0940, leveraged an open-source AI penetration testing framework to automate attacks at “machine speed,” bypassing traditional security detection timelines by gaining privileged cloud access in under three hours.
The breach centered on stolen application identities from ConnectWise Cloud Backup, a service formerly known as SkyKick. On October 17, 2026, ConnectWise took the proactive step of suspending several cloud-based services, including Cloud Backup, SaaS Security, and Cloud Management, as it coordinated with Microsoft to contain the fallout. Investigations confirmed that the attackers did not exploit a software vulnerability, but rather abused trusted application credentials to move laterally into the environments of thousands of downstream companies.
The ARTEX Framework and Machine Speed Operations
The defining characteristic of the Storm-0940 campaign was the use of ARTEX, an “agentic AI” framework designed for offensive security testing. According to technical findings from the Microsoft Security Blog, this framework coordinates multiple AI agents to handle specific tasks, such as reconnaissance, credential stuffing, and privilege escalation, without human intervention for each step.
The automation enabled a blistering operational tempo. Microsoft reported that the ARTEX framework was capable of conducting sign-in attempts at a rate of 2,900 per minute. This high-frequency automation allowed the threat actors to identify valid credentials and escalate their permissions with remarkable efficiency, often reaching high-level privileged access in less than 180 minutes after initially selecting a target.
ConnectWise CEO Manny Rivelo noted that the use of such frameworks allows nation-state actors to test thousands of connections simultaneously. By utilizing AI to manage the complexities of a supply chain attack, the actors effectively compressed what was once a multi-day operation into a matter of hours.
Impacted Services and Mitigation Efforts
The incident has forced a significant disruption to ConnectWise’s service portfolio. While the primary target was the Cloud Backup service, the suspension of SaaS Security and Cloud Management tools reflects the broader risk posed by the compromise of service principal identities. These identities are frequently used by IT management software to perform automated tasks across customer tenants, making them high-value targets for espionage.
For Microsoft 365 administrators, the focus has shifted to identifying and revoking unauthorized access. Security experts recommend a thorough audit of service principal sign-ins and existing OAuth grants within their tenants. Specifically, organizations using ConnectWise Cloud Backup should look for unusual activity originating from application IDs associated with the SkyKick legacy infrastructure.
As of late October 2026, ConnectWise is working to restore services while implementing enhanced verification measures. This campaign highlights a critical shift in the threat landscape, where AI agents are no longer a theoretical risk but a functional tool for scaling nation-state cyber operations against the global software supply chain.
