Microsoft attributes Microsoft 365 intrusions to Storm-0940 using compromised ConnectWise app credentials with ARTEX agentic AI for access and actions. It shows trusted third-party apps plus AI can scale tenant compromise fast. Audit app consents, rotate credentials, hunt anomalous OAuth activity. #Storm0940 #Microsoft365 #ConnectWise #ThreatIntel https://cyberworldops.eu/en/compromised-connectwise-app-credentials-enabled-artex-assisted