Archive for October 2026
LiteLLM Supply Chain Attack: A Key Never Revoked
The LiteLLM supply chain attack of October 21 did not start on October 21. According to LiteLLM’s own root cause report, a master key committed to a public repository on May 27 was never revoked. An attacker used it on October 10 to reach the GitHub account of an organization owner, and eleven days later…
Read MoreDigital Omnibus Incident Reporting: Council Position
The Council of the European Union has agreed its negotiating position on changes that could reshape Digital Omnibus incident reporting: how organisations report personal-data breaches and cybersecurity incidents. For MSPs and MSSPs that run incident response for clients, the proposals could matter a great deal. They are not law yet. What Happened On 21 October…
Read MoreConnectWise Supply Chain Attack Hits Microsoft 365
The ConnectWise supply chain attack now has a name behind it. Microsoft assesses that the China state-aligned group Storm-0940 used stolen credentials of ConnectWise cloud applications to sign in to customer Microsoft 365 tenants, with AI agents doing the work. Disabling the ConnectWise connection may not be enough, because the attackers could have added credentials…
Read MoreRank Math Supply Chain Attack Hits WordPress
A Rank Math supply chain attack put malware into the premium plugin’s update channel: version 3.0.123 of Rank Math PRO, downloaded or updated between October 15 (20:02 UTC) and October 16 (07:12 UTC), contained a backdoor. The window lasted about 11 hours. The vendor’s clean build is 3.0.124, and the free plugin from WordPress.org is…
Read MoreTop 5 Cybersecurity News
This week’s Top 5 Cybersecurity News for October 23, 2026 is about time. Attackers needed hours, and in one case started four days before public disclosure. Recovery asked for days: restores from clean backups, rotated credentials, client updates and, at one grocery group, more than a week without e-commerce. A flaw in PHP, the language…
Read More