The latest signals.
Every signal published to the Observatory, newest first. Each entry names its source, separates event, publication and update times, and says whether an editor reviewed it.
published signals · source freshness current · last source check 3 Nov 2026, 19:00 UTC
1 signal · Cyber Warfare
Open the Observatory >Microsoft attributes AI-automated intrusion campaign to China-aligned Storm-0940
Microsoft Threat Intelligence reports that Storm-0940, which it assesses as China-state aligned, used the open-source agentic penetration-testing framework ARTEX to automate attacks targeting hundreds of organizations globally since as early as September 2026, including attempted sign-ins to more than 2,250 tenants, following a supply-chain compromise of ConnectWise and using credentials stolen from its cloud applications.
- Source published
- 21 Oct 2026, 00:00 UTC
- Event time
- Unknown
- Added to the Observatory
- 26 Oct 2026, 16:48 UTC
- Location precision
- Location unknown
5 signals: 4 reviewed by editors, 1 published automatically after an AI check. 5 sources are monitored for new items; each is checked before it is published. This is a curated selection, not a complete record of global events. Signals without an established country are included here but belong to no region.