Mobile Security & Privacy Decades-Old Integer Overflow Chained With Kernel Flaw Yields Root Access on OpenBSD 7.9 October 18, 2026 rifanmuazin A newly published local privilege escalation exploit successfully achieves root access on OpenBSD 7.9 by ingeniously chaining a roughly 37-year-old integer overflow with a separate kernel vulnerability. This sophisticated attack…
Mobile Security & Privacy Major Supply Chain Attack Exploits Compromised ConnectWise Cloud Backup Credentials to Target Microsoft 365 Environments October 18, 2026 rifanmuazin Cybersecurity researchers are sounding the alarm over an active and sophisticated supply chain campaign in which unknown threat actors have abused compromised Microsoft 365 credentials belonging to ConnectWise Cloud Backup,…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Attack Campaign October 18, 2026 Nana Muazin Cybersecurity researchers have uncovered a malicious npm package disguised as a utility library, marking the latest escalation in a sophisticated and long-running software supply chain campaign tracked under the codename…
Mobile Security & Privacy ConnectWise Disables Application Identities Following Microsoft 365 Tenant Compromises October 18, 2026 Jia Lissa IT management software provider ConnectWise announced Saturday that it has taken the decisive step of disabling seven application identities as part of its ongoing, intensive investigation into a security incident…
Mobile Security & Privacy ConnectWise Disables Compromised Application Identities Following Microsoft 365 Tenant Breaches October 18, 2026 Lina Hope IT management software provider ConnectWise has confirmed the disabling of seven application identities as part of an ongoing, high-stakes security investigation. The emergency response follows an incident in which unknown…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Campaign October 18, 2026 Suro Senen Cybersecurity researchers have uncovered a malicious npm package disguised as an image decoding utility, marking the latest evolution in an ongoing software supply chain attack campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Discovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Neng Nana Cybersecurity researchers have uncovered a newly identified malicious npm package actively circulating within the open-source software ecosystem. The package is the latest weapon in a persistent and evolving software supply…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
Mobile Security & Privacy OpenBSD 7.9 Hit by Local Privilege Escalation Exploit Chaining Decades-Old Integer Overflow and Kernel Flaws October 17, 2026 Iffa Jayyana Security researchers have published a sophisticated local privilege escalation exploit targeting OpenBSD 7.9, demonstrating a method to attain root privileges by elegantly chaining a roughly 37-year-old integer overflow with a…
Mobile Security & Privacy Researchers Expose Root-Level Privilege Escalation Exploit in OpenBSD 7.9 Combining Decades-Old Integer Overflow with Kernel Flaw October 16, 2026 Nana Wu A newly published local privilege escalation exploit achieves root access on OpenBSD 7.9 by ingeniously chaining a roughly 37-year-old integer overflow with a separate kernel vulnerability. This sophisticated attack successfully…
