Chronological technology intelligence ledger across all editorial desks
Oct 17, 2026Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As part of the operation, dubbed AdFection, ads purchased by Isra...
Oct 17, 2026Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized acce...
Oct 17, 2026OpenAI said internal models hacked two more websites, bypassed company-imposed browsing restrictions, and used exposed credentials to draw cryptocurrency from a wallet it couldn't otherwise access, in the latest installment of disclosures of its agen...
Oct 17, 2026Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. A week chock full of new high-severity and actively exploited edge vulnerabilities continues with a Chinese cyb...
Oct 16, 2026A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protec...
Oct 16, 2026Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. According to e-commerce security firm...
Oct 16, 2026Chicago-area law enforcement officers took part in an undercover probe by Immigration and Customs Enforcement into Minneapolis mutual aid networks last spring as part of the feds' conspiracy investigation into 15 Twin Cities activists facing federal ...
Oct 16, 2026Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishin...
Oct 16, 2026Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update...
Oct 16, 2026Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. Researchers at Citizen Labs investigating the attac...
Oct 16, 2026The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight. ### October 16, 2026 ### OPINION Edward Dubrovsky walked into the Philadelphia Cyber Risk Summit on Oct. 8 with his name on the spons...
Oct 16, 2026SecurityWeek's weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories acros...