Popular
Nothing found for . Try a course, an exam code (SC-200), a tool or a topic.
↑↓ moveEnter openEsc close
Cyber security news, as it breaks.
Updated 133 stories in 24 hours
Microsoft Security
Microsoft, identity, cloud and the security operations centre.
35stories this week
1today
the last seven days
Most fromBleepingComputer, Help Net Security, CSO Online UK, Dark Reading
In the news hereMicrosoft31ConnectWise8Google2Nvidia2Lumma Stealer1
MyCyberWay trainingDefender and Sentinel in the headlines? That's the SC-200 toolkit.SC-200 course details
-
Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend after discovering that unknown attackers had obtained unauthorized access to seven of its application identities. The company discovered the incident…
Security Affairs
-
Microsoft has confirmed that this month’s Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems.
BleepingComputer
-
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise…
The Hacker News
-
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.
BleepingComputer
-
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm…
The Hacker News
-
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers’ M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs…
The Hacker News
-
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
Huntress
-
New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls.
Microsoft Security Blog
-
Legacy protocol is going to be axed, and enforcement by default will highlight how migration is going…
The Register
-
Microsoft says some users may have trouble turning on Smart App Control after installing this month’s KB5127648 Windows 11 security update.
BleepingComputer
-
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
SecurityWeek
-
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measurements at the start and end. He explains how the group handled settings that…
Help Net Security
