Nation-State Threat

Nation-state threat refers to cyber operations, espionage, or sabotage carried out by or on behalf of a government, which in AI settings usually means efforts to steal model weights, poach proprietary training data, or manipulate AI systems used in critical services. For enterprises, these actors tend to be better funded and more patient than typical criminals, so they can persist inside networks for months and target the suppliers, cloud providers, and open-source tools a company relies on. This raises the stakes for vendor due diligence, access controls on AI development environments, and reporting obligations if a company becomes a target or is caught in a campaign.

1 item

ResearchGlobal2026-10-24

China's Storm-0940 Used AI Agents to Hit 300+ Accounts at 2,900 Attempts Per Minute

Microsoft has identified a China-linked threat group, Storm-0940, using an open-source AI penetration testing tool called Artex to automate attacks on ConnectWise customer environments. The campaign hit over 300 accounts across eight organizations in mid-October 2026, reaching more than 2,900 attack attempts per minute. AI agents autonomously carried out credential theft, reconnaissance, and privilege escalation after gaining initial access.

Storm-0940 nation-state threat agentic AI credential theft ConnectWise Microsoft identity governance AI-enabled attacks