ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

The feed reports multiple active and emerging cybersecurity threats, including compromise of Microsoft 365 tenants through ConnectWise Cloud Backup identities, a malicious npm supply-chain package, zero-day exploitation of BeyondTrust Remote Support, FortiOS exploitation delivering PEERSTITCH malware, critical Linux virtualization escape, active PAN-OS exploitation, and widespread credential theft and phishing campaigns. It also covers critical vulnerabilities in Next.js, Drupal, NGINX, Langflow, and WinRAR, as well as software-update tampering and spyware deployments.