中国黑客在突破IT巨头ConnectedWise后

网络安全糟糕的一周对数千家公司来说

Microsoft的安全研究者说，中国国家联系的黑客闯入了ConnectWise的云备份服务，并窃取了用于建立ConnectWise与其公司客户之间的数据链接的应用证书，后者依靠云服务备份公司的数据。

黑客通过窃取身份证明，可以登录客户的Microsoft托管环境，仿佛他们是一个授权用户，并访问他们的电子邮件和其他文件。

据Microsoft称，黑客利用AI agents快速入侵约2,250个组织，每分钟有近3000次尝试登机。 Microsoft 称的这种速度给维权者“探测和响应的时间很少”。

质量袋的速度归功于使用AI agents，具体来说是ARTEX，一个与AI模型合作的开源 AI框架，用于压力测试网络防御。 韩国金融系统最近妥协时也采用了同样的AI软件，其中许多系统安全性弱，缺乏多要素认证。

ConnectWise 称暂停访问云备份系统，截至星期四，称公司正在努力恢复服务。

本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。

The bad week for cybersecurity just got worse for thousands more companies, who were spied on by Chinese hackers following the breach of IT management and remote access giant ConnectWise.

Security researchers at Microsoft say the China state-aligned hackers broke into ConnectWise’s cloud backup service and stole application credentials that are used to establish data links between ConnectWise and its corporate customers, who rely on the cloud service to backup their company’s data.

By stealing the credentials, the hackers could log in to the customer’s Microsoft-hosted environment as if they were an authorized user and access their emails and other files.

According to Microsoft, the hackers used AI agents to rapidly hack into around 2,250 organizations at a rate of almost 3,000 attempted sign-ins per minute. Microsoft said this speed gives defenders “little time to detect and respond.”

The speed of the mass-hacks were attributed to the use of AI agents, specifically ARTEX, an open-source AI framework that works with AI models to stress-test cyber defenses. The same AI software was used in a recent compromise of South Korea’s financial systems, many of which had weak security and lacked multi-factor authentication.

ConnectWise said it’s paused access to its cloud backup system and is investigating the breach. As of Thursday, the company said it was working on restoring the service.

Auto-fetched and translated by AI Atlas. All rights belong to the original author.