Hackers attack Microsoft 365 tenants via a ConnectWise supply chain attack

Hackers attack Microsoft 365 tenants via a ConnectWise supply chain attack

ConnectWise has suspended customer access to its cloud backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. Reports of the malicious activity first surfaced on Friday, with administrators observing unauthorized access to customer data in Microsoft 365 tenants due to a possible “SkyKick/CW breach.” Later the same day, … Read more

Criminal IP introduces AITEM as the next evolutionary stage of attack surface management

Criminal IP introduces AITEM as the next evolutionary stage of attack surface management

AI SPERA’s Criminal IP, a cyber threat intelligence platform that provides actionable intelligence and attack surface visibility to security teams worldwide, will attend GovWare 2026 in Singapore. As security operations increasingly focus beyond asset discovery to understanding, prioritizing and responding to threats, Criminal IP introduces AITEM (AI-Powered Threat Exposure Management), its vision for the next … Read more

Insider attack on cyber blackmail against industrial company sends engineer to prison

Insider attack on cyber blackmail against industrial company sends engineer to prison

A Kansas City, Missouri, man has been sentenced to 32 months in prison for crimes related to a ransom attack on his own business. The DOJ has announced the conviction of Daniel Rhyne. He had already pleaded guilty to “extortion in connection with the threat to damage a protected computer” and “intentional damage to a … Read more

Hadrian raises $40 million to expand autonomous attack protection platform

Hadrian raises  million to expand autonomous attack protection platform

Attackers use AI to locate and exploit vulnerabilities at machine speed; Hadrian provides an offensive security platform for agents that allows defenders to operate at the same speed. Amsterdam-based Hadrian has raised an additional $40 million in a Series B round, bringing its total funding to $65 million. The new financing was co-led by Forgepoint … Read more

Apple fixes meta-reported zero-day attack related to “extremely sophisticated attack”

Apple fixes meta-reported zero-day attack related to “extremely sophisticated attack”

Apple released iOS and macOS updates on Monday to patch a zero-day vulnerability that may have been exploited for targeted attacks. The bug, tracked as CVE-2026-86950, is an out-of-bounds write issue in the CoreGraphics component that can be exploited to execute arbitrary code when processing a specially crafted file. Apple hasn’t said how the malicious … Read more

Japanese company Keio confirms that a ransomware attack has disrupted business systems

Japanese company Keio confirms that a ransomware attack has disrupted business systems

Keio Corporation (Keio), a major private railway operator in Japan, said its network was hit by a ransomware attack over the weekend that crippled some of its business systems. After a system failure in the early hours of Saturday, the company confirmed the attack and shut down its network to prevent further damage. The company … Read more

SlowMist has yet to confirm crypto theft from the iPhone Safari attack

SlowMist has yet to confirm crypto theft from the iPhone Safari attack

An iPhone Safari attack on the back of recent security warnings has yet to be linked to the cryptocurrency theft confirmed in SlowMist’s investigation. Multiple reports emerged this week urging iPhone users to update their devices immediately and warning that malicious Safari pages could reveal crypto private keys and seed phrases, some citing a range … Read more

In other news: Ransomware developer convicted, Plugin4Shell AI attack, critical SAP flaw

In other news: Ransomware developer convicted, Plugin4Shell AI attack, critical SAP flaw

Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more