Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
2026-10-18T13:23:22Z•14a9c81165e25cdb2425435ebc9240237f386220103fb75408b48788d57388c7
CVE-2026-103849CVE-2026-110447Adobe CommerceArch Linux AURBeyondTrust Remote SupportBlockStrapCandiru spywareCollabora OnlineConnectWiseD-LinkDrupalMagentoMicrosoft 365NextcloudUbiquitiWindows Server 2022actively exploited vulnerabilitycloud securitydata breachmalvertisingmalwareproxyjackingremote code executionsecurity patchingsupply-chain attackzero-click exploitzero-day
What happened
BleepingComputer security roundup covering a ConnectWise Cloud Backup supply-chain compromise affecting Microsoft 365 tenants, critical and actively exploited remote-code-execution vulnerabilities in Drupal, BlockStrap/Magento, Collabora Nextcloud, and BeyondTrust, spyware and proxyjacking campaigns, malicious Arch Linux packages, major data breaches, and security update and support-lifecycle news.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 14a9c81165e25cdb2425435ebc9240237f386220103fb75408b48788d57388c7
- Enrichment time
- 2026-10-18T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.