BleepingComputer·
Hackers exploit SiteGuard WAF flaw to run commands as admins
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.
World news
Every morning, the most relevant news on the topics I follow, selected from leading Italian and international outlets, with a short summary of each article.
Edition of Monday, 19 October 2026 · updated at 08:29
Cybersecurity & Compliance
Threats, vulnerabilities and regulations such as NIS2, GDPR, DORA and the AI Act.
BleepingComputer·
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise has shut down customer access to its Cloud Backup service after hackers accessed application identities and compromised Microsoft 365 tenants.
The Hacker News·
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise disabled seven application identities after threat actors obtained unauthorized access and compromised Microsoft 365 tenants in a recent incident.
BleepingComputer·
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.
BleepingComputer·
Burger King Japan data breach exposes 11 million customer records
Burger King Japan disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.
The Hacker News·
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers discovered a malicious npm package named 'imgdecode' as part of the MALFEX supply chain attack campaign, which has been downloaded 979 times.
BleepingComputer·
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to Al Jazeera Media Network devices via targeted online advertisements in a zero-click attack requiring only rendering malicious ads on victim's device.
The Hacker News·
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Attackers repeatedly modified files on AOMEI Backupper's update servers in 5-10 minute windows between May and July 2026 to deliver a backdoor to the backup program.
The Hacker News·
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing
Cybersecurity researchers disclosed an APT spear-phishing campaign targeting individuals affiliated with Taiwan research organizations to harvest Google account credentials and MFA codes.
Cybersecurity360·
More Than a Myth of Invulnerability, Mythical Recklessness
The article examines how the myth of invulnerability in cybersecurity often represents recklessness, with underestimated risks, neglected controls, and false certainties leaving organizations vulnerable to incidents.
News stories belong to their respective publishers. Summaries and headline translations are generated automatically with AI: the original article, linked from each headline, is the authoritative source.