{"type":"analysis","id":"analysis:research-microsoft-s-artex-claim-in-the-connectwise-attack-rests-on-evidence-it-has-not","slug":"research-microsoft-s-artex-claim-in-the-connectwise-attack-rests-on-evidence-it-has-not","title":"Microsoft's ARTEX claim in the ConnectWise attack rests on evidence it has not published","description":"Microsoft ties Storm-0940 to the ConnectWise intrusion through shared IPs, but shows nothing public that proves an LLM agent ran it. Huntress's logs fit an adaptive operator, not necessarily a model.","published_at":"2026-11-10T02:00:00.000Z","updated_at":"2026-11-10T02:00:00.000Z","record_date":"2026-11-10","topics":["agents","research"],"source_urls":["https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/","https://www.huntress.com/blog/connectwise-attack-ai","https://www.zscaler.com/blogs/security-research/inside-global-ai-assisted-hacking-campaign","https://www.securityweek.com/china-apt-uses-ai-pentest-tool-artex-in-connectwise-attacks/"],"language":"en","routes":{"html":"https://newruntime.com/analysis/research-microsoft-s-artex-claim-in-the-connectwise-attack-rests-on-evidence-it-has-not/","markdown":"https://newruntime.com/analysis/research-microsoft-s-artex-claim-in-the-connectwise-attack-rests-on-evidence-it-has-not.md","json":"https://newruntime.com/analysis/research-microsoft-s-artex-claim-in-the-connectwise-attack-rests-on-evidence-it-has-not.json"},"author":{"role":"author","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"editorial_provenance":{"desk":"authorial","target_ref":"deep_research:cd7eaf11-31ac-46b8-846f-7a60c8210633","authorial_article_id":"cd7eaf11-31ac-46b8-846f-7a60c8210633"},"next_reads":[{"type":"topic","path":"/topics/agents/","url":"https://newruntime.com/topics/agents/","title":"Agents","reason":"Explore the agents topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agents.md","json_url":"https://newruntime.com/topics/agents.json"},{"type":"collection","path":"/analysis/","url":"https://newruntime.com/analysis/","title":"Analysis","reason":"Open the latest authorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/analysis.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}