ConnectWise Supply Chain Attack Hits Microsoft 365

By Editorial Team | October 26, 2026
ConnectWise supply chain attack: Storm-0940 abuses stolen cloud app credentials against Microsoft 365 tenants, October 2026

The ConnectWise supply chain attack now has a name behind it. Microsoft assesses that the China state-aligned group Storm-0940 used stolen credentials of ConnectWise cloud applications to sign in to customer Microsoft 365 tenants, with AI agents doing the work. Disabling the ConnectWise connection may not be enough, because the attackers could have added credentials…

Read More

Rank Math Supply Chain Attack Hits WordPress

By Editorial Team | October 23, 2026
Rank Math supply chain attack CVE-2026-111862: backdoored PRO plugin update 3.0.123, October 2026

A Rank Math supply chain attack put malware into the premium plugin’s update channel: version 3.0.123 of Rank Math PRO, downloaded or updated between October 15 (20:02 UTC) and October 16 (07:12 UTC), contained a backdoor. The window lasted about 11 hours. The vendor’s clean build is 3.0.124, and the free plugin from WordPress.org is…

Read More

SafePay Ransomware Wipes Backups First

By Editorial Team | October 22, 2026
SafePay ransomware advisory AA26-293A: backups destroyed before encryption, October 2026

SafePay ransomware has compromised at least 600 organizations since August 2024, and a joint advisory published on October 20 says its operators halt shadow copies and reset backup storage before they encrypt anything. The FBI, CISA and the US Secret Service wrote it together with Germany’s Landeskriminalamt Rheinland-Pfalz and UK law enforcement (the National Crime…

Read More

PHP Critical Vulnerabilities Leaked Before Patch

By Editorial Team | October 21, 2026
Seven padlocks on a steel rail, three rusted and four brass, one with a blue tag, under the headline Critical PHP Flaws Leaked Before the Patch

Two critical PHP vulnerabilities leaked before their patch, early attacks are reported, and the EU’s CERT says internet-facing applications may need to be isolated until it is installed. PHP’s security team released the fix on October 21 at 14:00 UTC (16:00 CEST). Both flaws are rated CVSS v4.0 9.2, and researchers report remote code execution.…

Read More

Nextcloud Collabora Vulnerability Exploited

By Editorial Team | October 21, 2026
Nextcloud Collabora Built-in CODE Server vulnerability CVE-2026-110447 exploited to plant web shells, October 2026

A Nextcloud Collabora vulnerability in the optional Built-in CODE Server app has let attackers plant web shells on Nextcloud servers since September 10. Collabora fixed it on September 11 without a security notice, and the CVE (CVE-2026-110447) followed only on October 14. Disabling the app does not close the hole: update it or remove it.…

Read More