AI-Driven Supply Chain Breach Forces Multi-Day Halt to Key Enterprise Tools

ConnectWise has initiated a phased restoration of its cloud services following a sophisticated supply chain attack that leveraged artificial intelligence to bypass traditional security defenses. The incident, which resulted in the precautionary suspension of Cloud Backup, SaaS Security, and Cloud Management, is expected to take several days to fully resolve. While the company reports no current indicators that partner backup data was compromised, the disruption highlights the growing financial and operational risk posed by automated cyber threats in the enterprise sector.

The attack was orchestrated by Storm-0940, a China-state-aligned actor active since 2021. This group deployed ARTEX, an open-source agentic AI penetration testing framework, to accelerate reconnaissance and credential abuse. By exploiting stolen credentials from the ConnectWise multi-tenant application, the attackers were able to authenticate as applications without interactive user sign-ins. This method allowed them to reach privileged access in some environments in under three hours, significantly compressing the window for defensive response.

The timeline of the breach reveals a rapid escalation. On October 11, the group executed a peak password spraying campaign, generating 2,900 failed attempts per minute. Although nearly 98% of these attempts were locked out, the successful infiltration of ConnectWise app identities allowed the AI agents to sign into customer tenants from shared IP ranges. At one point, more than 200 sign-ins occurred in under four minutes using just four application credentials. The systematic, sorted order of these attacks indicated the use of a script working from a predefined target list.

Security firm Huntress confirmed unauthorized sign-ins for 162 tenants by October 16, a figure that grew to nearly 1,000 Entra tenants by the following day, with over 300 successful logins. In one specific instance on October 15, an application added itself to the top administrator role, a behavior that triggered alerts for self-assigned Global Administrator roles. The attackers also planted new secrets set to expire in 2028, suggesting an intent for long-term persistence within the compromised networks.

The targeting strategy focused on high-value industries, including aerospace and defense, semiconductors, government, and think tanks, with 14 specific sectors listed. Microsoft clarified that the breach did not stem from a vulnerability in its own systems but rather from the compromise of the third-party application. The use of ARTEX, which can operate with minimal human interaction, marks a shift in attack methodology, as similar tools have been linked to recent breaches in South Korean financial institutions.

In response to the evolving threat landscape, the developer of ARTEX, known by the handle Autumn-27, announced on GitHub that the project would cease updates and transition to closed source. This move may impact other threat actors relying on the framework. For businesses, the immediate financial impact is twofold: the cost of downtime during the restoration period and the ongoing expense of auditing logs and disabling affected app connections. Microsoft advises customers to keep impacted app connections disabled until formal restoration instructions are issued, emphasizing that a successful sign-in does not automatically equate to data exfiltration, but verification is critical for risk management.

As the restoration process continues, the incident serves as a stark reminder for enterprise procurement and vendor management. The speed at which AI agents can navigate and exploit privileged access demands a reevaluation of third-party access controls. With the attack affecting more than 2,250 Microsoft 365 tenants, the supply chain implications are widespread, requiring coordinated efforts between platform providers and enterprise clients to secure their digital perimeters.