China-aligned hackers deploy AI agents in massive ConnectWise supply chain attack

Automated password guessing failed, but stolen app credentials needed no user sign-in at all.