Microsoft attributes ConnectWise supply-chain breach to China-state aligned threat group
Original headline: Microsoft pins ConnectWise supply-chain attack to China-state aligned threat group
Microsoft researchers said the Storm-0940 group used an agentic AI penetration-testing framework to automate the attack, reaching more than 2,250 tenants with about 2,900 sign-in attempts per minute, and linked the ConnectWise supply-chain breach to a threat actor aligned with the Chinese state.
The scale of AI-driven automation in supply-chain attacks underscores the need to reassess defensive strategies.
Research angleHow does the use of AI-based penetration-testing tools affect organizations’ perception of supply-chain security? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by CyberScoop. Please check the original article for accuracy. Copyright in the original article belongs to CyberScoop.