Safety & RulesMicrosoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
Source of truthmicrosoft.com/…/storm-0940-uses-artex-a…In a post on October 21, Microsoft says Storm-0940, a group it assesses as China-state aligned, has used ARTEX since as early as September 2026. ARTEX is an open-source penetration testing framework built on AI agents that can use any AI model. The group targeted hundreds of organizations; most of the targeting failed, but in multiple instances it reached privileged cloud access in under 3 hours. Microsoft says no vulnerability in its own products was involved. Why it matters: according to Microsoft, agents can work around the clock and try several breach paths at once.
Related stories
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.
EDPB: when the GDPR applies to people wearing smart glasses
In an initial statement, the European Data Protection Board explains when people recording with smart glasses have obligations under the GDPR.