Cybersecurity
Cybersecurity news — Saturday 17 October 2026
7 stories from 5 sources, every one in English. Each links to its publisher.
-
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
BleepingComputer
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
-
Drupal patches critical RCE flaws, warns exploits may emerge soon
BleepingComputer
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
-
Plug-in solar is legal in these 10 states now – how it could save you money
ZDNet Security
So-called balcony solar setups are becoming legal across the US. Here’s the latest.
-
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
The Hacker News
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package registry on September…
-
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
SecurityWeek
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets. The post Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel appeared first on SecurityWeek…
-
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
The Hacker News
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain…
-
Federal agencies recommend cyber controls, independent testing for frontier AI systems
CyberScoop Asia
The federal government is advising AI companies to set more industry standards for securing agents in sandbox testing environments. In joint guidance from the Cybersecurity and Infrastructure Security Agency, the National Security Agency…