ConnectWise suspends Cloud Backup after Microsoft 365 tenant compromise
ConnectWise disabled seven compromised application identities after attackers used them to authenticate across 173 Microsoft 365 tenants.
supply chain
Our coverage: 29 reports since October 8, 2026. Latest: ConnectWise suspends Cloud Backup after Microsoft 365 tenant compromise, October 18, 2026.
-
-
China proposes controls on 40 technologies, 23 tied to AI
The draft would limit exports of AI models that have 2 trillion or more parameters and those placed among the world's top 10.
-
Researchers detail how imgdecode npm package hides Windows shellcode
The MALFEX campaign has used the package to deliver a loader that downloads encrypted shellcode from GitHub on Windows systems.
-
AI-driven attacks now move 4 times faster
Palo Alto Networks’ Unit 42 finds threat actors using AI to slash breach cycles to under an hour, while its service integrates OpenAI and Anthropic models to detect vulnerabilities continuously
-
Hackers used compromised ConnectWise credential to sign in to 173 Microsoft 365 tenants
Huntress reported that attackers used the credential to get Microsoft Graph tokens from IP address 144.172.64.128 on October 15, 2026 between 06:13 and 08:34 UTC.
-
China-linked Armory Castle hijacks BeyondTrust Remote Support Servers via zero-day since August
The espionage group exploited CVE-2026-102764 to deploy custom malware, harvest credentials, and evade detection across enterprise networks, researchers say
-
Jeremiah Fowler finds unprotected Vibetech database with 13.7 million records
The exposed data included credentials taken from prior breaches and was accessible without any authentication.
-
A 2026 report on agent security found that roughly 1,280 third-party products now embed AI
A 2026 report found that approximately 1,280 third-party products embed artificial intelligence, leaving security teams facing significant blind spots.
-
Zero Trust buzzword outpaces real adoption—why enterprises stall at marketing
Forbes Councils and Note warn the term is overused, while BleepingComputer and NIST outline the technical and cultural shifts needed for genuine implementation.
-
CEOs see cyber-enabled fraud and phishing as top threat over ransomware
87 percent of respondents say AI-related vulnerabilities are the fastest-growing cyber risk.
-
OWASP names prompt injection top LLM risk for third straight year
The ranking draws on a database of about 10,000 real‑world AI security incidents tracked by OWASP.
-
Daiichi Kosho said malware at contractor may have leaked 8,631,000 customer records
The leaked customer information consists of names, gender, birth dates, email addresses, and phone numbers.