Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack

Microsoft’s attribution of the ConnectWise supply chain attack to the China-linked actor Storm-0940 underscores how trusted software ecosystems can be weaponized at scale, with more than 2,200 tenants affected. The use of an AI-enabled penetration-testing tool to automate and accelerate the intrusion signals a growing shift toward faster, more adaptive attacks, increasing pressure on CIOs to harden third-party risk management, identity controls, and detection/response capabilities across the software supply chain.