ConnectWise

ConnectWise is a US-based software company that makes remote monitoring and management (RMM) and professional services automation tools, which IT service providers use to watch over and control their clients' computers and networks. Because these platforms hold broad administrative access across many customer environments at once, a compromise of the vendor can cascade into the systems of every managed service provider and business that relies on it. For enterprise AI governance and compliance teams, ConnectWise matters as a reminder to assess third-party and supply chain risk, including the vendors that manage IT on the company's behalf and any AI tools those vendors embed into their platforms.

1 item

ResearchGlobal2026-10-24

China's Storm-0940 Used AI Agents to Hit 300+ Accounts at 2,900 Attempts Per Minute

Microsoft has identified a China-linked threat group, Storm-0940, using an open-source AI penetration testing tool called Artex to automate attacks on ConnectWise customer environments. The campaign hit over 300 accounts across eight organizations in mid-October 2026, reaching more than 2,900 attack attempts per minute. AI agents autonomously carried out credential theft, reconnaissance, and privilege escalation after gaining initial access.

Storm-0940 nation-state threat agentic AI credential theft ConnectWise Microsoft identity governance AI-enabled attacks