Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
2026-10-23T02:51:33Z•f23c3be0afb8403e0aa74ac85a6c1331b9d0e3f770ce87bd4ca5f063361ed1dd
CVE-2026-104935AI-assisted-attacksClickFixConnectWiseGitHub-compromiseGlassWormICSLumma-StealerOT-securityPHPStorm-0940active-exploitationcertificate-compromisecloud-securitycredential-theftinsider-threatphishingransomwareremote-code-executionsupply-chain-attackthreat-intelligenceunpatched-firmwarezero-day
What happened
Dark Reading feed highlights active and emerging cyber threats, including the Storm-0940/ConnectWise supply-chain attack affecting more than 2,200 tenants, exploitation of critical PHP vulnerabilities, compromised developer and certificate infrastructure, ClickFix malware delivery, edge-device zero-days, phishing operations, ransomware, and OT risks from unpatched firmware. The most urgent items involve active exploitation, supply-chain compromise, credential theft, and critical remote-code-execution vulnerabilities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- darkreading
- Record identifier
- f23c3be0afb8403e0aa74ac85a6c1331b9d0e3f770ce87bd4ca5f063361ed1dd
- Enrichment time
- 2026-10-23T02:51:33Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.