Cybersecurity News
Filters
Filtered by category: Cybersecurity News, tag: oauth abuse × Clear
China-Linked Hackers Use ARTEX AI to Target 2,250 Microsoft 365 Tenants After ConnectWise Breach
Matched: Claude
China-linked hackers using Storm-0940 exploited the ConnectWise Cloud Backup breach to target over 2,250 Microsoft 365 tenants, using the AI-powered penetration framework ARTEX. Attackers abused stolen application credentials rather than passwords, authenticating as trusted apps and using Microsoft Graph to alter permissions. Microsoft and Zscaler published findings October 21, noting some attacks achieved privileged access in under three hours.