Mobile Security & Privacy Major Supply Chain Attack Exploits Compromised ConnectWise Cloud Backup Credentials to Target Microsoft 365 Environments October 18, 2026 rifanmuazin Cybersecurity researchers are sounding the alarm over an active and sophisticated supply chain campaign in which unknown threat actors have abused compromised Microsoft 365 credentials belonging to ConnectWise Cloud Backup,…
Mobile Security & Privacy ConnectWise Disables Compromised Application Identities Following Microsoft 365 Tenant Breaches October 18, 2026 Lina Hope IT management software provider ConnectWise has confirmed the disabling of seven application identities as part of an ongoing, high-stakes security investigation. The emergency response follows an incident in which unknown…
Mobile Security & Privacy Major Open-Source Maintainer Accounts Compromised in Renewed "GhostAction" Supply Chain Attack Campaign October 10, 2026 Pevita Pearce Cybersecurity researchers have issued urgent warnings regarding an ongoing, highly sophisticated credential-theft campaign that has successfully compromised high-profile open-source maintainer accounts to covertly inject malicious automated workflows into hundreds of…
Mobile Security & Privacy GhostAction Campaign Strikes Again: High-Profile Open-Source Accounts Compromised to Push Malicious GitHub Workflows October 9, 2026 Ali Ikhwan Cybersecurity researchers have uncovered alarming new details regarding an ongoing credential-theft campaign known as GhostAction, which has successfully compromised high-profile open-source maintainer accounts to propagate malicious workflows across tens of…
Mobile Security & Privacy Compromised GitHub Actions Repositories Reactivated Briefly, Threatening Supply Chain Security with Dormant Malware September 25, 2026 Ammar Sabilarrohman Security researchers have issued fresh warnings regarding the software supply chain after two popular GitHub Actions repositories were briefly re-enabled last week, months after being compromised during the widespread May…
