Microsoft Report: Open-Source AI Agent Artex Automates Cyberattacks

1 reports archived1 independent sourcesupdated 10/22/2026, 11:41:27

Synthesis & Latest Updates

1 Sources Cross-Validated

Microsoft reports that the Chinese state-aligned actor Storm-0940 used an open-source AI agent named Artex to automate cyberattacks on hundreds of global organizations. Artex chains LLM agents to execute penetration testing from reconnaissance to data theft, achieving privileged cloud access in under 3 hours and drastically reducing defenders' response time.

LATEST/Microsoft reports that the Chinese state-aligned actor Storm-0940 used an open-source AI agent named Artex to automate cyberattacks on hundreds of global organizations. Artex chains LLM agents to execute penetration testing from reconnaissance to data theft, achieving privileged cloud access in under 3 hours and drastically reducing defenders' response time.

HEAT TRENDHourly heat curve

3 fully observed hours

Now

16.6

Peak

17.012:00

24h change

–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

TIMELINECoverage timeline

Total 1 reports · Latest first

Rohan Paul (@rohanpaul_ai)T2·Oct 22, 11:4178 pts
Microsoft Report: Open-Source AI Agent Artex Automates Cyberattacks
- Open-source AI agent Artex automates the full attack chain from reconnaissance to data theft
- Attack velocity is extreme, with some intrusions gaining privileged cloud access within 3 hours
- AI agents abuse OAuth apps and Microsoft Graph APIs to bypass MFA and escalate privileges
View Related Reports & Analysis Original Source