China-linked hackers used AI tool to breach ConnectWise and reach hundreds of organisations
The group, tracked by Microsoft as Storm-0940, exploited ConnectWise's trusted application identity to slip past authentication without an interactive login. In some cases it gained privileged cloud access within three hours — and that access can survive initial cleanup efforts.