{"version":1,"type":"story","url":"https://digestai.news/story/uk-investigates-beijing-backed-ai-hacking-spree","json":"https://digestai.news/story/uk-investigates-beijing-backed-ai-hacking-spree.json","markdown":"https://digestai.news/story/uk-investigates-beijing-backed-ai-hacking-spree.md","slug":"uk-investigates-beijing-backed-ai-hacking-spree","headline":"UK investigates Beijing-backed AI hacking spree","summary":"Britain's National Cyber Security Centre is urgently investigating a global hacking campaign attributed to a Beijing-backed group called \"Storm-0940\". The investigation, conducted with Microsoft and other partners, seeks to determine if sensitive British organisations in defence, energy, finance, government, and technology have been compromised. Microsoft reported that the hackers used AI to target hundreds of organisations worldwide, successfully breaching cloud infrastructure in some cases within three hours.\n\nThe campaign involved a supply-chain attack on ConnectWise, an American company whose cloud service backs up Microsoft 365 data. ConnectWise suspended its services after the breach, notifying the Information Commissioner's Office. While the company stated that stored backups showed no signs of compromise, it warned that unauthorized access to individual customer systems might persist and requires separate review.\n\nThe attackers reportedly used \"Artex,\" an open-source tool released in July by a Chinese developer, which connects hacking tools to AI agents to autonomously probe targets. This incident coincides with a surge in AI-boosted attacks, including millions of attempts against websites running PHP. In response, UK ministers announced hundreds of millions of pounds in investment for AI security, including £60m for a National Cyber Shield and £70m for tools to spot vulnerabilities in critical infrastructure.","keyPoints":["NCSC investigates Storm-0940 campaign targeting defence, energy, finance, government, and tech sectors.","ConnectWise suspended services after a breach, warning that unauthorized access to customer systems may remain.","UK ministers announced £60m for a National Cyber Shield and £70m for AI vulnerability detection tools."],"whyItMatters":"The use of AI agents to accelerate cyberattacks reduces the time to breach critical infrastructure, prompting urgent government investment in defensive AI tools and highlighting new risks for global digital security.","category":{"slug":"policy","name":"Policy & Regulation","url":"https://digestai.news/category/policy"},"entities":{"companies":["Microsoft","ConnectWise","Baidu","Anthropic"],"models":[],"people":["Manny Rivelo","Jason Clinton","Prof Alan Woodward"]},"firstPublishedAt":"2026-10-23T17:00:00Z","updatedAt":"2026-10-23T17:00:00Z","sourceCount":1,"hasPrimarySource":false,"sources":[{"outlet":"yahoo.com","title":"UK on alert over Beijing-backed AI hacking spree","url":"https://yahoo.com/news/world/articles/uk-alert-over-beijing-backed-053000600.html","publishedAt":"2026-10-23T17:00:00Z","type":"press","primary":false,"lead":true}],"sourceNotes":null,"discussions":[],"thread":{"title":"Global AI Threats Spark International Scrutiny","url":"https://digestai.news/thread/microsoft-says-storm-0940-used-ai-driven-artex-framework-in-attacks","storyCount":2},"cite":{"text":"Digest AI, \"UK investigates Beijing-backed AI hacking spree\", 23 October 2026, https://digestai.news/story/uk-investigates-beijing-backed-ai-hacking-spree","publisher":"Digest AI","title":"UK investigates Beijing-backed AI hacking spree","datePublished":"2026-10-23T17:00:00Z","url":"https://digestai.news/story/uk-investigates-beijing-backed-ai-hacking-spree"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}