Microsoft says 151,000 password attempts against ConnectWise victims succeeded exactly zero times. The part that worked made no sign-in at all
2026-10-22Security
The attribution is out: Microsoft assesses the ConnectWise compromise was China-state aligned Storm-0940, using an agentic pentest framework. The spray campaign is the visible half, and it failed entirely.