Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise

AI agents are starting to compress the time between breaching a software provider and exploiting its customers. Microsoft says a China-aligned hacking group compromised IT services giant ConnectWise, then used AI agents to accelerate attacks against thousands of companies connected to its systems. For builders and security teams, the concern is less that AI enabled a novel exploit and more that it automated reconnaissance and follow-on intrusion at scale. ConnectWise sits inside managed IT workflows, making one breach a potential route into many downstream organizations. The incident is a warning to treat agentic security tooling as an offensive capability too: tighten access controls around service providers, monitor machine-speed account activity, and prepare to revoke integrations quickly when a vendor is compromised.