AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog

Microsoft's security blog brings glad tidings from Storm-0940, a China-state-aligned actor that has spent the autumn automating its way across hundreds of organisations with ARTEX, an open-source agentic AI penetration-testing framework. The phrase 'penetration-testing framework' is doing a lot of work there, in the way that 'gardening implement' does a lot of work for a pickaxe. ARTEX is a tool for testing whether your defences hold; Storm-0940 is testing whether yours hold, at scale, on your behalf, without asking.

The number to sit with is three hours — the time from initial targeting to privileged cloud access in multiple instances. Not three weeks of patient reconnaissance, not the three months a human intrusion team used to bill for. Three hours, which is roughly the length of a mildly ambitious meeting about whether to do a security review.

So the legislative response to autonomous AI attack is a draft bill with a number in it, arriving after the tooling. ARTEX is open source, and therefore presumably forkable, which means somewhere a policy aide is drafting a definition of 'agentic' while a framework three GitHub clicks away runs the intrusion. The gap isn't a gap any more; it's the distance between the press release and the breach.