UK investigates Beijing-backed AI hacking spree

The campaign involved a supply-chain attack on ConnectWise, an American company whose cloud service backs up Microsoft 365 data. ConnectWise suspended its services after the breach, notifying the Information Commissioner's Office. While the company stated that stored backups showed no signs of compromise, it warned that unauthorized access to individual customer systems might persist and requires separate review.

The attackers reportedly used "Artex," an open-source tool released in July by a Chinese developer, which connects hacking tools to AI agents to autonomously probe targets. This incident coincides with a surge in AI-boosted attacks, including millions of attempts against websites running PHP. In response, UK ministers announced hundreds of millions of pounds in investment for AI security, including £60m for a National Cyber Shield and £70m for tools to spot vulnerabilities in critical infrastructure.