Posts Tagged ‘supply chain’
Top 5 Cybersecurity News
This week’s Top 5 Cybersecurity News for October 30, 2026 is about assumptions nobody re-checked. A Japanese hosted-desktop service held customers’ saved trading logins on servers attackers could reach, after its own staff had flagged weaknesses. A VMware ESXi flaw scored 2.7 on the CVSS scale was used as a zero-day to keep administrator actions…
Read MoreConnectWise Supply Chain Attack Hits Microsoft 365
The ConnectWise supply chain attack now has a name behind it. Microsoft assesses that the China state-aligned group Storm-0940 used stolen credentials of ConnectWise cloud applications to sign in to customer Microsoft 365 tenants, with AI agents doing the work. Disabling the ConnectWise connection may not be enough, because the attackers could have added credentials…
Read MoreTop 5 Cybersecurity News
This week’s Top 5 Cybersecurity News for October 23, 2026 is about time. Attackers needed hours, and in one case started four days before public disclosure. Recovery asked for days: restores from clean backups, rotated credentials, client updates and, at one grocery group, more than a week without e-commerce. A flaw in PHP, the language…
Read MoreTop 5 Cybersecurity News
This week’s Top 5 Cybersecurity News for October 16, 2026 has one thing in common: each story turns on a check that looked like proof of safety. A VPN appliance was fully patched and the vendor’s integrity tool found nothing, yet an attacker held root. French supermarkets ran refrigeration controllers that sit outside most IT…
Read MoreIDC Frontier Ransomware: One Cloud, 495 Customers
One ransomware attack on one cloud region has hit 495 companies and local governments in Japan at once. IDC Frontier, a SoftBank subsidiary, said its IDCF Cloud service was struck by ransomware on October 7 at 3:40 a.m. local time, forcing it to shut down the network and systems of its East Japan Region 1.…
Read More