Security news.
Today's security landscape is dominated by active supply chain compromises and rapid weaponization of freshly disclosed flaws. Threat actors are compromising hundreds of Microsoft 365 tenants via ConnectWise Cloud Backup credentials, while weaponized exploits are immediately targeting Plex servers and edge infrastructure. Meanwhile, critical unpatched and zero-day vulnerabilities in Broadcom chipsets and BeyondTrust remote access tools warrant urgent defensive action.
ConnectWise Cloud Backup Hijacked to Breach Microsoft 365 Tenants
Attackers compromised application identities and credentials associated with ConnectWise Cloud Backup (formerly SkyKick), gaining unauthorized access to over 170 customer Microsoft 365 environments.
CISA Urges Emergency Patching for BeyondTrust Remote Support Zero-Day
Threat actors and Chinese APT group Armory Castle have been actively exploiting CVE-2026-102764, a critical authentication bypass flaw in BeyondTrust Remote Support versions 26.2.3 and earlier, prompting an immediate CISA KEV catalog addition.
Plex2Shell Exploit Chain Weaponized Hours After Disclosure
Threat actors are actively mass-exploiting the Plex2Shell vulnerability chain against exposed Plex media servers to deploy cryptocurrency miners and proxy malware.
Unpatched Broadcom Wi-Fi Flaw Grants Root Access Over the Air
An unpatched vulnerability in Broadcom's Wi-Fi setup software allows attackers within radio range to execute arbitrary code as root on affected routers without requiring authentication or pairing.
SiteGuard WAF Flaw Actively Exploited for Root System Access
Hackers are actively targeting an OS command injection vulnerability in SiteGuard Server Edition, enabling them to execute commands with root or SYSTEM privileges on vulnerable host servers.
OpenCode Console Breach Exposes Third-Party AI API Keys
A breach of a legacy server at OpenCode Console has potentially exposed customer API keys for OpenAI, Anthropic Claude, and Google Gemini integrations.
Drupal Patches Critical Remote Code Execution Vulnerabilities
Drupal has released urgent security updates resolving two critical RCE vulnerabilities affecting all supported versions of the CMS platform, warning that in-the-wild exploitation is likely imminent.
October Windows Server Updates Break Exchange Mail Flow and OWA
Microsoft confirmed that its October 2026 cumulative updates for Windows Server cause authentication failures in Outlook Web Access (OWA) and disrupt inbound/outbound Exchange mail delivery.