Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds: what are the key facts?

Since September 2026, Storm-0940 has used the AI penetration framework ARTEX to automate attacks on hundreds of organizations worldwide.

Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds: what are the key facts?

Targets span aerospace, defense, finance, government, semiconductors, and other industries.

Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds: what are the key facts?

In multiple attacks, the time from selecting a target to gaining privileged cloud access was under 3 hours.

Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds: what are the key facts?

Microsoft assesses that Storm-0940 is behind the ConnectWise supply chain attack.

Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds: what are the key facts?

The attackers authenticated to Microsoft 365 using already-authorized OAuth applications, requiring no user interaction to sign in.

Physix Frontier · News Briefing Card (enbrief · Oct 22, 2026)

Microsoft: Storm-0940 Uses AI Framework ARTEX to Hit Hundreds

KEY FACTS

Since September 2026, Storm-0940 has used the AI penetration framework ARTEX to automate attacks on hundreds of organizations worldwide.
Targets span aerospace, defense, finance, government, semiconductors, and other industries.
In multiple attacks, the time from selecting a target to gaining privileged cloud access was under 3 hours.
Microsoft assesses that Storm-0940 is behind the ConnectWise supply chain attack.
The attackers authenticated to Microsoft 365 using already-authorized OAuth applications, requiring no user interaction to sign in.

KEY DATA

HundredsNumber of targeted organizations

Under 3 hoursShortest time to privileged access

Over 2,250Number of ConnectWise affected tenants

2,900 per minuteLogin attempt rate

PHYSIX OBSERVATION

AI agents let attackers try multiple intrusion paths simultaneously 24/7, compressing attacks that traditionally took days into under 3 hours and drastically shrinking defenders' response window. ARTEX is open source and supports multiple languages, lowering the barrier to AI attacks, and supply chain and cloud identity security face entirely new challenges.

Source: enbrief original report ↗