Content by Microsoft Security Research and Microsoft Threat Intelligence (1)

Microsoft Security Research and Microsoft Threat Intelligence detail how Storm-0940 used the ARTEX agentic AI framework to accelerate a ConnectWise supply chain compromise, then abused OAuth application identities to access Microsoft 365 tenants via app-only authentication and Microsoft Graph, with concrete mitigation steps, detections, IOCs, and hunting queries.