ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
2026-10-18T19:24:00Z•e3005d59352bdc517132a1b20075a3ac653e9c8814f95a1c9ec9c9a6cac1c5e2
CVE-2025-61624CVE-2026-0322CVE-2026-102764CVE-2026-99999BeyondTrustConnectWiseDrupalFortinetLangflowLinux kernelMFA theftMSSPMicrosoft 365NGINXNext.jsPalo Alto PAN-OSactive exploitationadversary-in-the-middlecloud securityidentity compromisemalvertising thehackernewsnpm malwarephishingprivilege escalationremote code executionspywaresupply chain compromisevirtual machine escapezero-day
What happened
The feed highlights active exploitation and major security incidents across cloud services, enterprise software, networking products, open-source frameworks, supply chains, and AI systems. Key events include compromise of ConnectWise Cloud Backup identities affecting Microsoft 365 tenants, malicious npm supply-chain activity, exploitation of BeyondTrust, FortiOS, PAN-OS, WinRAR, NGINX, Next.js, Drupal, and Langflow vulnerabilities, Linux virtualization escape risks, targeted AitM phishing, spyware delivered through malvertising, and large-scale GitHub credential theft. Several stories involve
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- e3005d59352bdc517132a1b20075a3ac653e9c8814f95a1c9ec9c9a6cac1c5e2
- Enrichment time
- 2026-10-18T19:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.