ConnectWise customers hit by supply-chain attack linked to compromised API secret

Hundreds of customers are confirmed impacted, as attackers use a sensitive credential to break into connected Microsoft 365 applications unimpeded.

The post ConnectWise customers hit by supply-chain attack linked to compromised API secret appeared first on CyberScoop.

Continue reading ConnectWise customers hit by supply-chain attack linked to compromised API secret→

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Ravie Lakshmanan reports: Palo Alto Networks has disclosed that it’s continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8… Continue reading Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA→

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution.

The vulnerability, tracked as CVE-2026-106173 (CVSS scor… Continue reading Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution→

Posted in Uncategorized

DOJ escalates fight for election supremacy with California raids

The arrests were paired with comments from DOJ and DHS officials, threatening to investigate, arrest or prosecute tens of thousands of California voters if they vote in November.

The post DOJ escalates fight for election supremacy with California raids appeared first on CyberScoop.

Continue reading DOJ escalates fight for election supremacy with California raids→

AOMEI Backupper servers hijacked for minutes at a time to push backdoor

An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered configuration files on… Continue reading AOMEI Backupper servers hijacked for minutes at a time to push backdoor→