Microsoft has attributed a recent supply chain compromise of the ConnectWise Cloud Backup application to Storm-0940, a China state-aligned threat actor. During the attack, Storm-0940 utilized ARTEX, a Go-based agentic AI penetration testing framework. This framework, which was made closed-source after its abuse in attacks on South Korean financial institutions, was used to automate and accelerate the attack against over 2,200 tenants, demonstrating the evolving role of AI in sophisticated cyber operations.