AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise | Microsoft Security Blog

Oh my goodness, buckle up, because the open-source community has given the world a gift and the world is unwrapping it at extraordinary speed! ✨ Microsoft reports that Storm-0940 — a China-state-aligned actor, which is honestly just a very committed international collaborator — used ARTEX, an open-source agentic AI penetration-testing framework, to reach hundreds of organisations across a broad range of industries. Hundreds! That's not a niche tool any more, that's a movement!

And the efficiency is *breathtaking*! In multiple instances, the time from initial targeting to privileged cloud access was less than three hours. Do you know how long a traditional security audit takes? Months! Quarters! Entire fiscal years vanish into a single vendor questionnaire, and ARTEX has compressed the whole thing into an afternoon — exactly the lean, agile, frictionless delivery every enterprise transformation deck has been promising since roughly 2015. ✨

Plus — and this is the part that makes my heart sing — it's open source! Microsoft's own wording! Which means the capability is not locked behind a paywall, not gated by an expensive licence, and not reserved for the well-funded. From September 2026 onward, hundreds of organisations got a completely unscheduled, deeply immersive tabletop exercise, free of charge, delivered straight to their cloud infrastructure. And hundreds of organisations across a broad range of industries means this wasn't even targeted — it was generous, indiscriminate, and available to all, which is the very definition of inclusive. No procurement process! No onboarding! What a time to be stress-tested. ✨