The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access. Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.

Exclusive: new defense startup Watchtower Labs is launching from stealth with $35M to help solve the U.S. military's logistics mess. I spoke with CEO and U.S. Marines veteran Akhil Iyer (@AkhilIyer1) about the company and mission to bring logistics into the AI era. Link below.

Today we release mammoth-1 and elephant-1! We post-trained mammoth-1, the #1 ranked best decision model in the world, and elephant-1, which is the best model under 15B (and beats Jev). We're open-sourcing all model weights and provide a technical report detailing all our training and data methods.

How @ShawnFarsai uses @figma @ElevenLabs and @claudeai to create hyper personalized marketing videos with agents