ConnectWise Disables Cloud Backup Identities After Microsoft 365 Breach
ConnectWise disabled seven application identities, including ConnectWise Cloud Backup, after unknown attackers gained unauthorized access and compromised Microsoft 365 tenants. The company says it is still investigating the incident.
Microsoft’s October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Microsoft's October 2026 Patch Tuesday addresses a record 1,411 vulnerabilities, including one actively exploited zero-day and two publicly disclosed zero-days. Windows users and IT admins are urged to install the updates promptly.
The MFA Gaps Hackers Are Still Exploiting
Attackers are still exploiting gaps in multi-factor authentication coverage, using stolen credentials to break into VPNs, RDP, and Windows systems that rely on passwords alone. Specops outlines why securing cloud apps alone isn't enough and how…
New AvisLoader Malware Uses P2P Encryption to Dodge Takedowns
Security researchers at Varonis detailed a new Windows malware loader called AvisLoader that uses encrypted peer-to-peer communications to make its command-and-control network harder to shut down. The malware spreads via ClickFix social engineering,…
Criminal IP Launches AITEM to Take Attack Surface Management Beyond Visibility
Criminal IP has introduced AITEM, an AI-powered attack surface management tool that goes beyond asset discovery to connect exposure findings with investigation, risk prioritization, and response. The company positions it as the next evolution of attack…
Check Point Issues Emergency Fix for Management Server Zero-Day
Check Point Software has released emergency hotfixes to address a critical zero-day vulnerability in its Security Management Server that allows attackers to execute arbitrary scripts.
New BambooToken Malware Uses MQTT to Control Windows and Linux Systems
A newly discovered malware framework named BambooToken has been active since 2023, utilizing the MQTT protocol for command-and-control operations across Windows and Linux platforms.
BlueMoon Exploit Kit Targets Windows and Chrome Zero-Day Flaws
Cyber-espionage groups are using a new exploit kit called BlueMoon to target previously unknown vulnerabilities in Microsoft Windows and Google Chrome. The kit allows attackers to gain unauthorized access by leveraging these zero-day flaws.
US Indicts Russian National Over Malware Campaign Targeting 80,000 Freelancers
A Russian national has been charged in California for a phishing campaign that infected thousands of freelancers with TVRAT and DarkVNC malware. The scheme allegedly targeted remote workers to gain unauthorized access to their computers and sensitive…
How to secure your Android phone with the right settings
A guide on configuring Android settings to protect your device from malicious apps, scam calls, and privacy invasions.