Today's edition

The stories that changed the day.

The most consequential developments in technology and the world, selected against strict editorial criteria. Each is explained in twenty seconds.

Stories on your topics appear first.

SecurityReuters9:39 AM

Why it mattersMicrosoft attributes a China-aligned group's ConnectWise supply chain compromise to an open-source agentic AI pentest framework, with under-3-hour privileged cloud access and 2,900 sign-in attempts per minute across 2,250+ tenants, showing AI-driven attacks o…

CompaniesNikkei Asia9:27 AM

Why it mattersTaiwan's first-ever semiconductor strike, at Micron's Taoyuan plant over sharing AI-boom memory profits, shows chip workers testing their bargaining power, though it is a one-day action at one firm.

PolicyReuters8:13 AM

Why it mattersThe orders take effect in March 2027 rather than Friday, so the game's return is substantially delayed.

Policy9to5Mac8:13 AM

Why it mattersAn Australian federal court ordered Apple to allow third-party app stores, sideloading and alternative payments on iPhones from March 1, 2027, adding a binding national remedy to the global fight over mobile distribution control, though Apple will appeal and…

AITechCrunch3:28 AM

Why it mattersThe shopping figure includes travel purchases, which clarifies what the agent-led commerce numbers actually measure.

You have reached the end of today's stories.

Securityvia ReutersToday · 9:39 AM

Microsoft Says China-Linked Hackers Used ARTEX AI Tool to Breach ConnectWise

Audio brief

What happened

Microsoft says a China-state aligned hacking group it tracks as Storm-0940 used ARTEX, an open-source AI penetration testing framework that automates offensive security work, to speed up attacks on hundreds of organizations worldwide.

Why it matters

The case shows how attackers are folding AI agents into existing methods to work faster and at greater scale.

In detail

Microsoft assesses the group was behind the recently disclosed ConnectWise supply chain compromise of a multi-tenant cloud backup application.

In some cases, the group went from first targeting an organization to privileged access to its cloud infrastructure in under three hours.

Microsoft said the activity did not stem from a compromise of, or vulnerability in, its own systems, products, or services.

Microsoft notes that agents can work around the clock and try several breach paths at once.

After the ConnectWise intrusion, the group used ARTEX to attempt sign-ins to more than 2,250 tenants (separate customer environments) at up to 2,900 attempts per minute, leaving defenders little time to respond.

Most of the targeting failed, but Microsoft says the group still gained lasting privileged cloud access at many organizations.

Between October 10 and 14, 2026, infrastructure tied to the group ran a password-spray campaign against 327 accounts at eight organizations, producing more than 151,000 failed logons, with no successful authentication observed.

Microsoft says that infrastructure matches network addresses in ConnectWise's advisory, including one identical IP address.

Microsoft says the attackers abused stolen credentials of ConnectWise cloud applications that customers had already trusted, which let them sign in to Microsoft 365 environments without an interactive user login. In multiple environments, they then used Microsoft Graph, the interface for Microsoft 365 data and directory settings, for reconnaissance, application credential changes, and attempts to alter privileges. Such changes can work as a backdoor even after the original application is fixed. Microsoft stresses that an affected application or a successful sign-in does not necessarily mean data was accessed or stolen. It advises customers to keep affected ConnectWise connections disabled until ConnectWise gives restoration instructions, preserve evidence, review service principal sign-ins and credential or privilege changes, and follow ConnectWise's containment guidance. Microsoft Defender XDR offers detections and hunting queries for the activity.

Importance93out of 100High importance

An automated editorial system rates every story from 0 to 100 for its significance. Only stories above a strict threshold are published; the higher the score, the greater the importance.

Original source

Download share image

Download 4:5 post Download 9:16 story

VOICE COMMENTS0 comments

Readers on this story

Record a comment of up to 60 seconds. Others can listen now or later, and reply with their own.

Loading comments…

Loading today's stories

Retrieving the latest stories.

Microsoft Says China-Linked Hackers Used ARTEX AI Tool to Breach ConnectWise

Audio brief

What happened

Why it matters

The case shows how attackers are folding AI agents into existing methods to work faster and at greater scale.

In detail

Microsoft assesses the group was behind the recently disclosed ConnectWise supply chain compromise of a multi-tenant cloud backup application.

In some cases, the group went from first targeting an organization to privileged access to its cloud infrastructure in under three hours.

Microsoft said the activity did not stem from a compromise of, or vulnerability in, its own systems, products, or services.

Microsoft notes that agents can work around the clock and try several breach paths at once.

Most of the targeting failed, but Microsoft says the group still gained lasting privileged cloud access at many organizations.

Microsoft says that infrastructure matches network addresses in ConnectWise's advisory, including one identical IP address.

Importance93out of 100High importance

An automated editorial system rates every story from 0 to 100 for its significance. Only stories above a strict threshold are published; the higher the score, the greater the importance.

VOICE COMMENTS0 comments

Readers on this story

Record a comment of up to 60 seconds. Others can listen now or later, and reply with their own.

Loading comments…

Microsoft Says China-Linked Hackers Used ARTEX AI Tool to Breach ConnectWise

Micron Labor Union Stages Taiwan's First Semiconductor Strike, Demands

Epic Says Fortnite Returns to Australian App Store Tomorrow After Court Ruling

Australian judge rules Apple must allow third-party app stores on iPhones from

Meta Says Muse Has Over 10M Users, With Shopping a Top Activity

The day's important stories, every morning

Loading today's stories

Get stories like this every morning.

Microsoft Says China-Linked Hackers Used ARTEX AI Tool to Breach ConnectWise

Micron Labor Union Stages Taiwan's First Semiconductor Strike, Demands

Epic Says Fortnite Returns to Australian App Store Tomorrow After Court Ruling

Australian judge rules Apple must allow third-party app stores on iPhones from

Meta Says Muse Has Over 10M Users, With Shopping a Top Activity

The day's important stories, every morning