Feed
Discussion
Storm-0940 Tied to ConnectWise Breach: AI Agents Targeted 2,250+ Tenants
An agentic AI pentest framework, a stolen API secret, and 2,900 sign-in attempts per minute. Microsoft assesses that Storm-0940 was responsible for the ConnectWise Cloud Backup supply chain compromise
Responses
Markdown supported · ⌘↵ to post
Abhinav Sharma
Founder of Impact Gate. See who breaks before you change an API.
2,900 sign-in attempts a minute is the part defenders can actually act on: even without knowing the secret was stolen, that rate against a normal tenant baseline should trip anomaly detection. Rotating API secrets on a schedule, not just after an incident, shortens the window a stolen one stays useful.