{"id":813194,"date":"2026-10-25T07:06:16","date_gmt":"2026-10-25T07:06:16","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/813194\/"},"modified":"2026-10-25T07:06:16","modified_gmt":"2026-10-25T07:06:16","slug":"uk-on-alert-over-beijing-backed-ai-hacking-spree","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/813194\/","title":{"rendered":"UK on alert over Beijing-backed AI hacking spree"},"content":{"rendered":"<p>Britain\u2019s cyber security agency is urgently investigating a Beijing-backed hacking campaign amid fears that sensitive secrets were compromised.<\/p>\n<p>The National Cyber Security Centre, an arm of GCHQ, is understood to be working with Microsoft and others to understand whether British organisations have been compromised by attacks from a group called \u201cStorm-0940\u201d.<\/p>\n<p>Microsoft last week uncovered a global campaign by the \u201cChina-state-aligned\u201d hackers to target hundreds of organisations around the world using AI.<\/p>\n<p>Sensitive industries, including defence, energy, finance, government and technology, were among those targeted, Microsoft said.<\/p>\n<p>ConnectWise, an American company, was compromised as part of the attack. Its cloud service is <a class=\"ck-custom-link\" href=\"https:\/\/www.telegraph.co.uk\/business\/2026\/10\/22\/php-governments-businesses-fix-cybersecurity-flaws\/\" rel=\"nofollow noopener\" target=\"_blank\">used by major organisations<\/a> to help back-up Microsoft 365 email and files.<\/p>\n<p>ConnectWise has notified Britain\u2019s data watchdog about a breach, which the Information Commissioner\u2019s Office is assessing.<\/p>\n<p>The supply-chain attack forced ConnectWise to suspend its services. The company said there was no sign that stored backups had been compromised, but warned that switching off its service would not remove any access the attackers had already gained to customers\u2019 systems.<\/p>\n<p>Manny Rivelo, the chief executive of ConnectWise, said: \u201cWe contained the affected application connections and are restoring services in controlled phases.<\/p>\n<p>\u201cThose actions do not remove unauthorised access that may already have been established within individual customer tenants, which require separate review.\u201d<\/p>\n<p>Microsoft said the China-linked hackers had been using AI to launch attacks since at least September and had successfully gained access to the cloud infrastructure of a number of organisations, sometimes in less than three hours.<\/p>\n<p>\u201cAI Agents are not constrained by factors affecting humans \u2013 they can work around the clock, on weekends, and on holidays and attempt multiple breach paths simultaneously enabling significantly reduced time from selecting a target to achieving objectives, increasing the speed and impact of complex attacks,\u201d security researchers wrote.<\/p>\n<p>It comes amid a barrage of AI-boosted hacking attempts over the past week. Websites around the world have been hit by millions of hacking attempts after AI agents discovered a vulnerability in PHP, a coding language.<\/p>\n<p>The programming language underpins about 70pc of the world\u2019s websites, and the flaw led governments and companies to pull their websites off the internet before they could be attacked, and so they could patch the fault.<\/p>\n<p>Experts said the vulnerability was only able to be attacked using AI, raising fears that the technology would uncover a host of other ways to hack the internet, critical infrastructure and companies.<\/p>\n<p>Jason Clinton, Anthropic\u2019s deputy chief information security officer, <a class=\"ck-custom-link\" href=\"https:\/\/www.telegraph.co.uk\/business\/2026\/10\/23\/cyber-chaos-going-to-get-a-lot-worse-warns-anthropic-securi\/\" rel=\"nofollow noopener\" target=\"_blank\">warned on Friday<\/a> that cyber security issues were \u201cgoing to get a lot worse before they get better\u201d.<\/p>\n<p>The Chinese state-aligned group behind the recent hacking campaign had been using a piece of software called Artex to supercharge their hacking attempts.<\/p>\n<p>The programme was released publicly in July by a Chinese developer as \u201copen source\u201d software, meaning it was available to download and modify for free.<\/p>\n<p>It works by connecting existing hacking tools to AI agents. All a user has to do is direct the agents towards a specific target, give it a goal and then it will autonomously attempt to hack the target using all methods it can find.<\/p>\n<p>\u201cBasically what it\u2019s doing is speeding up what human penetration testers did and making that process much shorter,\u201d Prof Alan Woodward, a specialist in computer science and cyber security at Surrey University, said.<\/p>\n<p>\u201cIt looks like the Artex tool was being used by these Chinese state live actors to do exactly that, they were probing all sorts of systems.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Britain\u2019s cyber security agency is urgently investigating a Beijing-backed hacking campaign amid fears that sensitive secrets were compromised.&hellip;\n","protected":false},"author":2,"featured_media":813195,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[554,733,4308,84,963,21027,5438,86,56,54,55,75232],"class_list":["post-813194","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-business","tag-cyber-attacks","tag-cyber-crime","tag-standard","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom","tag-websites"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/813194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=813194"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/813194\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/813195"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=813194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=813194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=813194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}