Microsoft discloses that Storm-0940 used the ARTEX agentic penetration testing framework to launch a large-scale nation-state supply chain attack

According to a Microsoft security blog, as early as September 2026, the China state-backed threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks on hundreds of organizations worldwide, spanning a wide range of industries. Microsoft said this AI-driven large-scale nation-state attack campaign led to supply chain compromise.