ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
The Hacker News 18.10.2026 08:23
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
The disabled identities are listed below –
ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae
ConnectWise
Phishing-Angriff auf Merz und viele andere: CDU-Mailkonto in Heilbronn gehackt
Heise Security 17.10.2026 16:00
Hacker dringen in das E-Mail-Konto der Heilbronner CDU ein und verschicken von dort Tausende Phishing-Nachrichten – auch an den Bundeskanzler Friedrich Merz.
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
The Hacker News 17.10.2026 11:11
Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX.
The package, named "imgdecode," was uploaded to the package registry on September 30, 2026, by a user named "malfexteste8." It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
The Hacker News 17.10.2026 06:16
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments.
ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs