Cybersecurity briefing, 2026-10-18

A compromised ConnectWise backup credential reached 173 Microsoft 365 tenants, turning one vendor account into a broad access event.

• ConnectWise backup credential opened 173 Microsoft 365 tenants
• Candiru rides targeted ads past user clicks
• SiteGuard flaw gives attackers root access to WAF servers

Recent editions

• Saturday, October 17, 2026: CISA puts BeyondTrust zero-day on the clock · 12 stories
• Friday, October 16, 2026: Cisco Secure Email Gateway flaw can spread in clusters · 19 stories
• Thursday, October 15, 2026: UAT-6275 mixes lures with public exploits · 17 stories
• Wednesday, October 14, 2026: Danfoss controllers turned refrigeration into a remote switch · 17 stories
• Tuesday, October 13, 2026: Bricksforge upload flaw turns form files into PHP · 16 stories
• Monday, October 12, 2026: Qilin and Settra turn Palo Alto VPN into access path · 15 stories
• Sunday, October 11, 2026: FBIjobs probe names a ransomware-response executive · 2 stories