{"version":1,"type":"story","url":"https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber","json":"https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber.json","markdown":"https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber.md","slug":"microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber","headline":"Microsoft says China-linked hackers used AI tool ARTEX in global cyberattacks","summary":"Microsoft reported on Oct. 21 that a China state-aligned hacking group, Storm-0940, used the AI tool ARTEX to accelerate cyberattacks against hundreds of organizations worldwide. The attackers compromised credentials for ConnectWise’s Cloud Backup application, allowing them to attempt access to over 2,250 customer cloud environments. In some cases, they gained privileged access in under three hours. Microsoft said the AI-assisted automation enabled rapid scanning and exploitation, though successful access did not necessarily mean data theft. ConnectWise confirmed the breach but said its backup archives remained encrypted and unaffected. The ARTEX developer, known as Autumn-27, condemned the misuse and said the tool would become closed-source and stop public updates.","keyPoints":["Storm-0940 used ARTEX to attack hundreds of organizations globally","Over 2,250 customer cloud environments were targeted via compromised ConnectWise credentials","ARTEX developer Autumn-27 denied involvement and said the tool will go closed-source"],"whyItMatters":"The use of AI to automate cyberattacks marks a significant escalation in threat speed and scale, reducing response time for defenders and highlighting risks of dual-use AI tools in security.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["Microsoft","ConnectWise","ThreatBook"],"models":[],"people":["Autumn-27"]},"firstPublishedAt":"2026-10-24T17:00:00Z","updatedAt":"2026-10-24T17:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"theepochtimes.com","title":"China-Linked Hackers Used AI Tool in Global Cyberattacks, Microsoft Says","url":"https://theepochtimes.com/china/china-linked-hackers-used-ai-tool-in-global-cyberattacks-microsoft-says-6108643","publishedAt":"2026-10-24T17:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"Global AI Threats Spark International Scrutiny","url":"https://digestai.news/thread/microsoft-says-storm-0940-used-ai-driven-artex-framework-in-attacks","storyCount":3},"cite":{"text":"Digest AI, \"Microsoft says China-linked hackers used AI tool ARTEX in global cyberattacks\", 24 October 2026, https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber","publisher":"Digest AI","title":"Microsoft says China-linked hackers used AI tool ARTEX in global cyberattacks","datePublished":"2026-10-24T17:00:00Z","url":"https://digestai.news/story/microsoft-says-china-linked-hackers-used-ai-tool-artex-in-global-cyber"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}