Microsoft says several Storm-0940 ARTEX-driven attacks resulted in the actor obtaining privileged access to an organization's cloud infrastructure, including multiple instances where the time from initial targeting to privileged access was less than 3 hours.

The exact words it rests on

Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor obtaining privileged access to an organization’s cloud infrastructure – including multiple instances where the time from initial targeting to privileged access was less than 3 hours.

What the source said when we opened it, on 24 Oct 2026.

The source

AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise
Microsoft Security Blog · 2026-10-21

Open the sourcearchived copy

Checked

Checked by the notis newsroom on 24 Oct 2026, against the source above.

In the story

Microsoft says Storm-0940 used the ARTEX agent framework in the ConnectWise compromise; it names no AI model 24 Oct 2026