The Hacker News (2 hours ago)
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
Read the full story on The Hacker News.
The privacy illusion finally wore off
Anthropic’s own testing says the switch is the weak point.
Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the three services enabled more than 1bn malicious messages targeting over 75,000 organisations worldwide.
Security researchers at Sublime are warning users about a new phishing tactic targeting work calendars. Reports of these attacks have surged in recent months because the technique is inexpensive and more likely to reach end users.
What if setting up your software was the hardest part of networking?
Al Jazeera journalists were infected, but the number of victims could be a lot bigger.
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.”
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments.
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD’s KARL kernel-address randomization and its SMAP and SMEP hardware protections.
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor’s own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and…
72 active sources
27 Turkish · 45 English
All sources
