Market & Regulation
Chinese hackers use AI agents to breach ConnectWise
TechCrunch AIhigh confidence
Why it matters
- →AI agents are now being used to automate credential stuffing at speeds that outpace human-led security monitoring.
- →Open-source security testing tools like ARTEX can be repurposed by adversaries for large-scale, automated attacks.
- →The breach underscores the systemic risk of centralized IT management platforms serving as single points of failure.
Chinese state-aligned hackers breached ConnectWise's cloud backup service, stealing credentials used by thousands of corporate customers to access Microsoft-hosted environments. According to Microsoft, the attackers utilized ARTEX, an open-source AI framework designed for stress-testing cyber defenses, to automate the intrusion. The AI agents executed approximately 3,000 sign-in attempts per minute against roughly 2,250 organizations, a speed that significantly reduced the window for defensive detection and response. ConnectWise has paused access to its cloud backup system while investigating the scope of the compromise.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
More from TechCrunch AI
© TechCrunch AIMarket & Regulationother
Judge allows NAACP lawsuit over xAI pollution to proceed
xAI's attempt to dismiss the NAACP's Clean Air Act lawsuit failed after a federal judge ruled that its gas turbines are not exempt mobile sources and that plaintiffs have standing. This legal setback confirms that AI infrastructure operators cannot bypass environmental permitting by classifying heavy industrial equipment as temporary or mobile. The ruling forces xAI to face scrutiny over air quality impacts at its Colossus data center, setting a precedent for how large-scale compute facilities are regulated under existing environmental laws.
TechCrunch AI
© TechCrunch AI
