REPORTED DEVELOPMENT
Microsoft Threat Intelligence published research on Storm-0940, which it attributes to Chinese state interests. It says the group used the ARTEX agentic framework to accelerate attacks across industries, including privileged cloud access in less than three hours.
The ConnectWise case shows how already-authorised application identities can become entry points into customer systems. Microsoft explicitly distinguishes organisations targeted by authentication attempts from organisations actually compromised. ConnectWise confirmed unauthorised access to application credentials associated with Cloud Backup/SkyKick. At 22:00 UTC on 21 October, it announced phased service restoration while retaining restrictions on affected connections pending official instructions.
WHY IT MATTERS TO THE MARKET
Third-party integrations create risks around application credentials, persistent permissions, cross-system access, operational monitoring and revocation. These also affect the total cost and economic risk of agentic architectures.