/
attack_type:credential_theft × criticity:critical × latest_source_host:techcrunch.com × limpar

Resultados

2 casos · pág. 1/1

techcrunch.com · critical

China-aligned hackers breach ConnectWise cloud backup, steal app credentials and use AI agents to compromise ~2,250 customer organizations

Microsoft researchers report that China state-aligned hackers breached ConnectWise's cloud backup service and stole application credentials used to link ConnectWise with its customers' Microsoft-hosted environments. With these credentials the attackers could sign in as authorized users and access emails and other files. Microsoft says the…

techcrunch.com · critical

PHP critical flaws, Node.js patches, LiteLLM supply chain compromise and eMudhra CA key compromise land on the same day

A cluster of unrelated but concurrent security events hit on 21 October 2026. Reuters reported government websites worldwide going offline after AI-discovered critical vulnerabilities in PHP, and the NSA advised organizations to update immediately or take PHP systems offline. The same day, Node.js patched four high-severity flaws, and Lit…