Author: Ryan Cross

Five days after attackers turned a stolen ConnectWise Cloud Backup credential against Microsoft 365 tenants, the incident has moved from discovery into cleanup. ConnectWise says it completed a full reset of all accounts and credentials in the affected Cloud Backup environment on October 19 and, as of its October 21 update, has begun restoring services […]

Five months after it was patched, a PAN-OS GlobalProtect authentication bypass has become one of ransomware’s favorite front doors. In an update published October 19, 2026, Palo Alto Networks’ Unit 42 said the Qilin (tracked as Spikey Scorpius) and INC (Tarnished Scorpius) ransomware operations are actively exploiting CVE-2026-0257, a CVSS 7.8 flaw in the GlobalProtect […]

On Monday, October 19, 2026, Microsoft announced a new set of controls in Microsoft 365 E7 and its Project Perception security system that treat AI agents as insiders rather than trusted software. The package includes Dynamic Permissions, which start an agent with no access and grant it only what a single task needs; Dynamic Agent […]

Since Friday, October 16, 2026, managed service providers have been scrambling after attackers got hold of a credential belonging to ConnectWise Cloud Backup, the Microsoft 365 backup service formerly sold as SkyKick, and used it to sign in to customer tenants as the trusted backup app itself. Huntress first confirmed unauthorized sign-ins in 162 tenants, […]

On Thursday, October 15, 2026, Microsoft announced that months of under-the-hood work on Windows 11 are now rolling out broadly, delivering what the company calls a Windows experience that is up to 20% more responsive across Start, File Explorer, Search, Settings, Snipping Tool, Microsoft 365 and Edge. The update leans heavily on smarter memory management, […]

If your organization runs Ivanti Connect Secure (ICS), this is the week to drop everything: on Tuesday, October 13, Ivanti disclosed CVE-2026-104935, a high-severity authentication bypass by spoofing with a CVSS score of 8.6 that lets a remote, unauthenticated attacker execute arbitrary commands on the VPN appliance, and it had already been exploited as a […]

Microsoft’s October 2026 Patch Tuesday landed on Tuesday, October 13, and it is a monster: according to Microsoft, as reported by SecurityWeek and Dark Reading, the release resolves a record 1,413 CVEs, which means Microsoft patched more vulnerabilities this month alone than it did in all of 2025 and pushed its 2026 running total past […]

Korean researchers have developed an electrolyte that roughly triples the cycle life of high-voltage lithium metal batteries using nothing more exotic than two inexpensive, commercially available solvents. Announced on October 12, 2026 by a team led by Professor Song Hyun-kon of UNIST (Ulsan National Institute of Science and Technology) and Professor Seo Dong-hwa of KAIST, […]

In a study published in Nature Physics in October 2026, researchers from Rutgers University, IBM and several collaborating institutions showed that a quantum computer can watch what is happening inside itself and react while it is still running. Using a chain of up to 100 qubits on a 156-qubit IBM Quantum Heron processor, the team […]