The agent is the attacker now, and the inventory can't see it

Description and use

<h2> The main case </h2> <p>Microsoft attributed the October 22 assault on ConnectWise Cloud Backup to Storm-0940, a China-linked group (Source: thehackernews.com).</p> <p>The attack used ARTEX, an agentic pentesting framework. No human was typing: an agent was firing login attempts at machine speed.</p> <p>The numbers make it clear. 2,900 login attempts per minute against 2,250 M365 tenants, and privileged access in under three hours (Source: thehackernews.com).</p> <p>A human team can't hold that pace against that many targets, but an agent can.</p> <p>And it isn't the only case this week wh

Problem

<h2> The main case </h2> <p>Microsoft attributed the October 22 assault on ConnectWise Cloud Backup to Storm-0940, a China-linked group (Source: thehackernews.com).</p> <p>The attack used ARTEX, an agentic pentesting framework. No human was typing: an agent was firing login attempts at machine speed.</p> <p>The numbers make it clear. 2,900 login attempts per minute against 2,250 M365 tenants, and privileged access in under three hours (Source: thehackernews.com).</p> <p>A human team can't hold that pace against that many targets, but an agent can.</p> <p>And it isn't the only case this week wh

Outcome

<h2> The main case </h2> <p>Microsoft attributed the October 22 assault on ConnectWise Cloud Backup to Storm-0940, a China-linked group (Source: thehackernews.com).</p> <p>The attack used ARTEX, an agentic pentesting framework. No human was typing: an agent was firing login attempts at machine speed.</p> <p>The numbers make it clear. 2,900 login attempts per minute against 2,250 M365 tenants, and privileged access in under three hours (Source: thehackernews.com).</p> <p>A human team can't hold that pace against that many targets, but an agent can.</p> <p>And it isn't the only case this week wh

Evidence

The agent is the attacker now, and the inventory can't see it

Source