Collaborate Disseminate
American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging… Continue reading ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In … Continue reading Attackers chained three Ivanti zero-days to gain root on fully patched VPN appliances
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Wind… Continue reading Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)
European food retailers have been affected by two separate disruptive cyberattacks: In France, several supermarket chains have had their freezers tampered with and chilled/frozen products destroyed, while in the Netherlands and Belgium workers at store… Continue reading Cyberattacks hit European grocers: French supermarket freezers hijacked, Dutch and Belgian stores disrupted
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed dr… Continue reading Hidden implant in Ledger hardware wallets linked to $93M theft
Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake … Continue reading YouTubers targeted with fake sponsorships and “channel verification” phishing
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after watchTowr researchers published a technical rundown of the flaw, attackers h… Continue reading Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their … Continue reading SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)
CISA has added another Citrix NetScaler vulnerability to its Known Exploited Vulnerabilities catalog on Sunday: CVE-2026-88779, a memory overflow bug that may cripple vulnerable NetScaler ADCs and Gateways. “Citrix has observed targeted attacks o… Continue reading CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)
Microsoft has pushed out an out-of-band security update for Exchange Server that fixes a high-severity vulnerability (CVE-2026-96940) that may allow authenticated attackers to read emails and attachments of other users in the same organization, but … Continue reading Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)