Microsoft says hackers used AI agents to target 2,250+ tenants

Microsoft published its findings on October 21. It calls the group Storm-0940 and says it is aligned with the Chinese state. The group used ARTEX, an open-source AI framework for penetration testing. Microsoft assesses the group was behind the ConnectWise Cloud Backup compromise. The agents used stolen ConnectWise app credentials to reach customer environments. In several attacks, the group got privileged access in under 3 hours. Microsoft says its own systems were not breached. It adds that access alone does not prove data was taken.

• Microsoft's diagnosis AI beat doctors on hard cases. A Science paper came out on October 22. In it, Microsoft's MAI-DxO system diagnosed 83.2% of 304 hard cases. Generalist doctors in the study scored 36.1%. The test used written cases in a controlled benchmark, not real patients. Microsoft plans a patient study with Beth Israel Deaconess Medical Center.
• Meta has signed up for about $825 billion of future spending. Meta's quarterly filing lists $454.52 billion of non-cancelable commitments, mostly cloud, servers and energy. It also lists $355.73 billion of data-center and energy leases starting through 2036. Up to $14.72 billion more of cloud capacity is contingent. The $825 billion total is our sum of the three.
• SK hynix drops Solidigm's IPO plans. SK hynix said on October 23 that Solidigm has stopped reviewing an IPO. It cited market volatility and a correction in chip stocks. SK hynix says Solidigm still needs a new US fab and will reassess financing.
• DeepSeek is closing a $15 billion round, reports say. Bloomberg and Reuters report DeepSeek raised about 100 billion yuan, or $15 billion. Reuters says Tencent and CATL were among the biggest investors. DeepSeek has not confirmed it, and Reuters says terms could still change.