Security news.
Threat actors have breached over 170 Microsoft 365 customer environments through a supply-chain intrusion targeting ConnectWise Cloud Backup application identities. Meanwhile, CISA has added an actively exploited BeyondTrust Remote Support zero-day to its Known Exploited Vulnerabilities catalog alongside ongoing edge-device targeting. Enterprise defense teams should also prioritize critical patches released for Drupal CMS, Magento, and F5 systems.
ConnectWise Suspends Cloud Backup After Microsoft 365 Tenant Breaches
ConnectWise disabled seven application identities after threat actors abused compromised credentials to gain unauthorized access to at least 173 customer Microsoft 365 environments.
CISA Adds Actively Exploited BeyondTrust Zero-Day to KEV Catalog
Attackers, including China-nexus espionage group Armory Castle, are actively exploiting CVE-2026-102764—a 9.3 CVSS authentication bypass in BeyondTrust Remote Support—to compromise edge infrastructure and establish persistence.
Drupal Patches Two Critical Remote Code Execution Flaws
Drupal issued security updates addressing two critical vulnerabilities across all supported versions of the CMS and warned administrators that in-the-wild exploitation may emerge quickly.
Critical BlockStrap Bug Risks RCE on Adobe Commerce and Magento Servers
Researchers warn that maximum-severity vulnerability CVE-2026-103849 can allow unauthenticated threat actors to execute arbitrary PHP code on affected e-commerce deployments.
Candiru Deploys Zero-Click Spyware Through Israeli Ad Firm Infrastructure
Digital rights researchers revealed that online advertising networks were used to fingerprint target devices and deliver zero-click spyware to high-profile targets without user interaction.
Hackers Hijack AOMEI Backupper Update Servers to Push Backdoors
Attackers repeatedly poisoned AOMEI Backupper's official update delivery infrastructure in short bursts to distribute trojanized payloads to endpoints checking for updates.
F5 and Juniper Networks Address Critical Device Takeover Vulnerabilities
Both vendors issued high-severity advisories fixing multiple flaws that allow remote attackers to achieve remote code execution and administrative takeover on networking appliances.
Burger King Japan Discloses Breach of 11 Million Customer Records
The fast-food chain's Japanese subsidiary reported unauthorized access to a backend server, exposing the personal details of more than 11.18 million customers.