Our Blog - page 1

Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 23, 2026: hourglass with blue sand and the headline “Attackers need hours. Recovery needs days.”

This week’s Top 5 Cybersecurity News for October 23, 2026 is about time. Attackers needed hours, and in one case started four days before public disclosure. Recovery asked for days: restores from clean backups, rotated credentials, client updates and, at one grocery group, more than a week without e-commerce. A flaw in PHP, the language…

Read More

ConnectWise Cloud Backup Incident and Microsoft 365

ConnectWise Cloud Backup credential used to sign in to Microsoft 365 tenants

In mid-October, Huntress and Microsoft reported that attackers had abused a compromised vendor-side credential associated with ConnectWise Cloud Backup (formerly SkyKick) to sign in to customers’ Microsoft 365 tenants. ConnectWise confirmed unauthorized access to its Cloud Backup application identities and took containment measures. Many managed service providers (MSPs) use Cloud Backup to copy their clients’…

Read More

Top 5 Cybersecurity News

Sealed matte-grey device on a dark table under a narrow lamp, with the headline “What Does Your Assurance Verify?” and the DIESEC logo, for Top 5 Cybersecurity News, October 16, 2026

This week’s Top 5 Cybersecurity News for October 16, 2026 has one thing in common: each story turns on a check that looked like proof of safety. A VPN appliance was fully patched and the vendor’s integrity tool found nothing, yet an attacker held root. French supermarkets ran refrigeration controllers that sit outside most IT…

Read More

Cyber Dependencies and Attack Surface: ENISA 2026

ENISA Threat Landscape 2026 and cyber dependencies expanding the attack surface

The ENISA Threat Landscape 2026, published on 22 September, has a message that gets less attention than the usual list of threats: organisations are increasingly exposed through their cyber dependencies, meaning the technologies, suppliers and services they rely on. For German businesses, that means cyber risk no longer sits only in internal networks and endpoints.…

Read More

Top 5 Cybersecurity News

Top 5 Cybersecurity News, October 9, 2026: FortiBleed lockouts, AI-driven bank hacks, the ASOS app breach, Osaka ransomware and Warlock SharePoint attacks.

This week’s Top 5 Cybersecurity News for October 9, 2026 has one thing in common: nobody needed a new exploit. A credential campaign against Fortinet firewalls now locks owners out of their own devices and feeds ransomware affiliates. An open-source AI tool probed South Korean banks through employee-facing systems. ASOS customers received their breach announcement…

Read More