Correction: two errors in pre-publication drafts of Issue No. 44 concerning the Storm-0940 reporting
PENDING · analyst declared 2026-10-27, ratification owed at the publisher
A record shown as PENDING has not been ratified by the publisher and publishes as pending. Do not render a pending correction as in force.
- id
- CHQ-CORR-2026-016
- class
- CORRECTION
- subtype
- editorial
- status
- PENDING
- authority
- analyst declared 2026-10-27, ratification owed at the publisher
- effective
- Not recorded
- published
- 2026-10-27
- title
- Correction: two errors in pre-publication drafts of Issue No. 44 concerning the Storm-0940 reporting
- what was wrong
- First, a draft stated that the public record does not establish which agent framework was deployed in the ConnectWise intrusion. The responder states the opposite directly, naming the framework as used during that compromise to accelerate scanning and reconnaissance, password spraying and application abuse at downstream victims. The qualification was introduced in response to an external editorial review and was not checked against the primary source. Second, drafts carried a figure for tenant sign-ins within a stated number of minutes that does not appear in the source text; it appears only in an image.
- what is true
- Framework use in that operation is stated by the source. The figure that appears only in an image is withdrawn from all published text and replaced with figures verifiable in the source prose. The hold on the candidate instance now rests solely on the autonomy element, that the source does not separate unattended agent action from operator-directed activity, and on the attribution being an assessment rather than a confirmation.
- what changed
- Both editions of Issue No. 44 were corrected before publication. The signal row carries a dated primary re-read note recording the verified figures, the withdrawn figure and the narrowed hold.
- what did not change
- Neither error reached publication. No rating, Outlook, count or evidence class changed.
- control analysis
- An editorial review that proposes a change to what a source established is not authority for that change. A rule that any published sentence asserting what a source does not establish must cite the primary-read date on which that absence was verified is proposed as a candidate, not an implemented control.
- found by
- An external review, on checking a draft against the primary source.