Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise
Source: TechCrunch (opens in a new tab) · Zack Whittaker
Intel Summary
According to TechCrunch, Microsoft attributed a major breach at IT software provider ConnectWise to a China-aligned threat actor. Microsoft reported that the attackers deployed AI agents to rapidly infiltrate and spy on thousands of ConnectWise customer networks.
Why It Matters
The incident demonstrates the real-world deployment of autonomous AI agents to accelerate cyber operations, enabling threat actors to automate lateral movement and rapidly scale downstream compromises across thousands of organizations through a single supply-chain breach.
Organizations & Entities
- China
- Microsoft
Topics
Related Intelligence
- ReportAlso involving Microsoft
OpenAI to Bring Models to Google Cloud
OpenAI announced a partnership to make its models available on Google Cloud. The agreement expands OpenAI's enterprise distribution and reduces its operational reliance on Microsoft, with whom it previously maintained exclusive cloud distribution arrangements.
The Information - DevelopmentNewAlso involving Microsoft
Storm-0940 deploys Artex AI agent for cyberattacks
Microsoft reports that Chinese state-aligned threat actor Storm-0940 used an AI agent named Artex to automate cyberattacks. According to Microsoft, the campaign targeted hundreds of organizations globally across multiple industries, with activity detected as early as September. Claims are as reported; this summary makes no determination about accuracy or significance.
- DevelopmentNewAlso involving China
Lava identifies Nvidia B300 chips on China Telecom network
The Information reports that Israeli security firm Lava identified 32 Nvidia Blackwell Ultra B300 data-center chips operating on systems linked to the network of China Telecom, a Chinese state-owned telecommunications enterprise, despite export restrictions barring their sale to China. Claims are as reported; this summary makes no determination about accuracy or significance.
- ReportAlso involving Microsoft
Microsoft gives Copilot another makeover, adding an Autopilot agent and usage-based billing
Microsoft is restructuring its Copilot application into three sections—Home, Code, and an autonomous cloud agent named Autopilot built on OpenClaw. According to Microsoft, Autopilot operates continuously in the cloud to monitor Teams channels and execute tasks independently. The company is also shifting pricing for Autopilot and Code from flat-rate subscriptions to usage-based billing.
The Decoder