A single vendor-held credential for a backup application has handed attackers a way into Microsoft 365 tenants belonging to MSP partners and their customers. In the ConnectWise Cloud Backup breach, an unknown threat actor signed in to customer environments as…
Author: V Diwahar
V Diwahar
I'm Aspiring SOC Analyst and independent Cybersecurity researcher, founder of CyberInfos.in. I analyzes cyber threats, vulnerabilities, and attacks, providing practical security insights for organizations and cybersecurity professionals worldwide.
A trusted SEO update quietly backdoored thousands of websites. Between 20:02 UTC on October 15 and 07:12 UTC on October 16, 2026, packages of Rank Math PRO version 3.0.123 distributed through the vendor’s official website and automated update channels contained…
This cybersecurity weekly report covers October 12 to 18, 2026. The week’s biggest story was a run of exploited edge-device flaws. Ivanti Connect Secure, Cisco Secure Email Gateway, Palo Alto Networks PAN-OS and BeyondTrust Remote Support all drew exploitation reports…
The U.S. Federal Trade Commission (FTC) has reportedly sent civil investigative demands to OpenAI and Anthropic. Axios broke the story on October 15, citing a person familiar with the matter. Reuters relayed it and said neither the agency nor the…
GitLab has fixed CVE-2026-97229, a critical flaw in the regular expression compiler that handles its CI/CD configuration. GitLab rates it CVSS 10.0, the highest possible score, and says that under certain conditions it could let an unauthenticated attacker run arbitrary…
Attackers got there first. On October 13, 2026, Ivanti disclosed CVE-2026-104935 and confirmed that a limited number of customers had already been hit. The flaw sits in Ivanti Connect Secure (ICS), the company’s SSL VPN gateway, and it lets a…