Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
2026-10-17T19:23:20Z•3fa1a7c81f5018248a5cb246da8c5b00076d5ae89a6c5b6ef94bdf0ba3e2f15d
CVE-2026-103849CVE-2026-110447Adobe CommerceAndroidBeyondTrustDrupalLinuxMagentoMicrosoft 365NextcloudWindowsactive exploitationcloud securitydata breachmalicious packagesproxyjackingremote code executionspywaresupply-chain attackvulnerability managementzero-click attackzero-day
What happened
BleepingComputer security feed covering active exploitation, critical remote-code-execution vulnerabilities, supply-chain and cloud tenant compromises, spyware delivery, data breaches, device hijacking, malicious packages, and security advisories affecting ConnectWise Cloud Backup, Drupal, Magento/Adobe Commerce, Nextcloud, BeyondTrust, Windows, Android, and network devices.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 3fa1a7c81f5018248a5cb246da8c5b00076d5ae89a6c5b6ef94bdf0ba3e2f15d
- Enrichment time
- 2026-10-17T19:23:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.