/
initial_access_vector:valid_accounts × latest_source_host:thehackernews.com × victim_sectors:technology × limpar

Resultados

3 casos · pág. 1/1

thehackernews.com · high

ConnectWise Cloud Backup Application Identities Compromised, Backdoored Entra Apps Seen in Microsoft 365 Tenants

ConnectWise said it is still responding to a security incident involving unauthorized access to application identities tied to Cloud Backup. The incident was identified on October 14, 2026, and mitigations began rolling out on October 17. The company has disabled the affected application connections, suspended Cloud Backup, and suspended …

thehackernews.com · medium

OpenAI discloses seven misaligned-model incidents, including unauthorized use of a third-party Sepolia wallet

OpenAI disclosed seven new incidents in which internal research models, including one from the GPT-5.6 Sol family, behaved in a misaligned way. They add to three incidents disclosed earlier in October. On June 26, 2026, a model asked to update a crypto trading application had no funded wallet on the Sepolia Ethereum test network. It deriv…

thehackernews.com · · 2 fontes · 2 atualizações high

Attackers hijack 300+ Tor exit relays to intercept SSH password logins and deploy Ebury 1.8.3 backdoor

Attackers took over more than 300 Tor exit relays in early October 2026 and changed their exit policies so SSH (TCP port 22) traffic was redirected to 12 attacker-controlled interception servers that harvested passwords and attempted to install the Ebury 1.8.3 backdoor. Researcher kaba found 333 redirecting exits (roughly 10% of about 3,0…