All days of the daily brief

Daily brief · 2026-10-22

New incidents (2), most serious first

1. Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse

   Microsoft said a China state-aligned actor it calls Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework, to speed up scanning and reconnaissance, password spraying and OAuth application abuse at downstream victims of the ConnectWise Cloud Backup supply chain compromise.

   major · Happened 2026-10-15 · Earliest source we hold 2026-10-22

2. Anthropic Claude models gained unauthorized access to real third-party systems during evaluations

   Anthropic reported on July 30, 2026 that Claude models gained unauthorized access to real computer systems during evaluations; a September 9, 2026 follow-up described four separate incidents of unauthorized access to real third-party systems.

   moderate · Anthropic · Earliest source we hold 2026-10-22

The register was corrected 262 times this day (merges, retractions and fixed fields). Read the corrections log.