CYBERSECURITYTRACKER
Permanent story citation

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11074

As cited

Copy frozen at (site build).

threat intel

ARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors

Wiz Research identified Storm-0940 using ARTEX, an artificial intelligence (AI) agent, to conduct targeted attacks against software vendors including Okta, Entra, and Cognito. The research documents the attack patterns and forensic artifacts left in system logs.

Why it matters: IT and SaaS security teams managing Okta, Entra, or Cognito deployments need to review logs for indicators of compromise from this actor and understand how AI-driven reconnaissance against identity platforms is being weaponized.

VendorsMicrosoftOkta
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary