Cybersecurity news from across the internet
Cybersecurity news from across the internet

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]





Top 5 Initial Access Threat Vectors Observed by Unit 42 in September 2026
Managing open-weight model risk in enterprise deployments
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th)
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
Phishing Is Now A Criminal Impersonation Industry. Here Is How To Fight Back
Phishing Attacks Target YouTubers With Phony Sponsorships
NIS2 Part Two: How Stolen Vendor Data Fuels Downstream Attacks
Eiliko robot companion exposes private chats and can be hijacked