Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
2026-10-18T01:23:22Z•1e9d8b8b4f8ca7b619b35d65c12fd4713f428ec082cbb9c4a1fcb20974dc5005
CVE-2026-103849CVE-2026-110447Adobe CommerceArch Linux AURBeyondTrustBlockStrapCandiruCollabora OnlineConnectWiseD-LinkDrupalMagentoMicrosoft 365NextcloudUbiquiticloud-backupcyberattackdata-breachexploitation-in-the-wildmalicious-packagesproxyjackingremote-code-executionspywaresupply-chain-attacktenant-compromisezero-clickzero-day
What happened
BleepingComputer security feed covering a ConnectWise Cloud Backup supply-chain compromise affecting Microsoft 365 tenants, multiple critical or exploited remote-code-execution vulnerabilities in Drupal, Magento/Adobe Commerce, Collabora/Nextcloud, and BeyondTrust, spyware and proxyjacking campaigns, malicious Arch Linux packages, significant data breaches, and security advisories. The most urgent items are active exploitation and supply-chain compromise reports.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 1e9d8b8b4f8ca7b619b35d65c12fd4713f428ec082cbb9c4a1fcb20974dc5005
- Enrichment time
- 2026-10-18T01:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.