28 casos · pág. 2/2
ConnectWise shut down its Cloud Backup service (formerly SkyKick Cloud Backup) after an attacker gained unauthorized access to application identities and used them to compromise Microsoft 365 tenants. Huntress identified at least 162 compromised tenants in its environment, and Microsoft Threat Intelligence characterized the incident as an…
Microsoft has fixed a known issue in the classic Outlook desktop client for Windows that hid the Copilot Chat and Copilot buttons for users with a Copilot Chat (Basic) or Microsoft 365 Copilot (Premium) license. Microsoft first announced a fix in June through a service change, but the bug resurfaced after recent updates and was investigat…
Microsoft has confirmed that the October 2026 Windows Server security updates cause Outlook on the web (OWA) sign-in failures and mail delivery problems on some on-premises Exchange Server systems. Affected hosts run Windows Server 2019 and later. Messages sent from Outlook may stay in the Outbox, and Exchange may have trouble accessing m…
Microsoft has fixed a known issue in which games and Windows 11 apps using AC-3 (Dolby Digital) audio decoding crashed after the September 2026 optional preview update KB5124010. The fix is included in the October 2026 Patch Tuesday update KB5127648, which Microsoft advises installing on affected systems running Windows 11 24H2 and later.…
Flare research, published as sponsored content, describes how underground forums package services that defeat Know Your Client (KYC) identity checks. Offerings include forged identity and financial documents, manipulated photos and AI-generated videos, live deepfake tools, and accounts advertised as already verified. The article cites the…
The open-source AI coding agent OpenCode disclosed a breach tied to a "large-scale distillation attack" that exposed stored external-provider API keys for 1.4% of OpenCode Console users. Affected users had linked providers such as Anthropic, OpenAI and Google. Users reported unauthorized charges ranging from several hundred USD to more th…
Bullhorn, a US cloud staffing and recruitment software vendor serving more than 10,000 customers, disabled access to its platform after detecting a cyber incident that caused a system-wide outage. Customers first saw job posting problems on Friday, and the company confirmed the cyberattack the following day. Bullhorn says it has isolated …
Between April and July 2026, a threat actor tracked as UNC7017 compromised AOMEI update and notification infrastructure and used it to push malware to users of AOMEI Backupper. The attackers briefly altered two configuration files and restored them within minutes to evade detection. The campaign was uncovered by ManageEngine's Threat Anal…
