Tech News & Gadgets Baseus Expands AI Security Lineup with the PrimeSentinel U2 Pro, Featuring a Motorized Active-Deterrent Spotlight October 20, 2026 Laily UPN Baseus has announced the latest addition to its expanding portfolio of AI-assisted security cameras, aiming to shift home monitoring from a passive recording tool to a more proactive line of…
Mobile Security & Privacy GhostAction Supply Chain Attack Escalates With Automated Phishing, OAuth Exploits, and Persistent Developer Stealers October 19, 2026 Lina Hope The threat actors orchestrating the widespread GhostAction supply chain attack have significantly expanded their operational tactics. Rather than relying solely on injecting malicious GitHub Actions workflows into compromised open-source projects,…
Mobile Security & Privacy ConnectWise Disables Application Identities and Suspends Cloud Backup Following Microsoft 365 Tenant Compromises October 19, 2026 Neng Nana IT management software provider ConnectWise has taken swift and sweeping defensive actions following a security incident that exposed vulnerable application identities to unknown threat actors, who subsequently used the compromised…
Mobile Security & Privacy Decades-Old Integer Overflow Chained With Kernel Flaw Yields Root Access on OpenBSD 7.9 October 18, 2026 rifanmuazin A newly published local privilege escalation exploit successfully achieves root access on OpenBSD 7.9 by ingeniously chaining a roughly 37-year-old integer overflow with a separate kernel vulnerability. This sophisticated attack…
Linux & Open Source Microsoft Defender Expands to Linux Desktops in New Enterprise Security Push October 18, 2026 Asep Darmawan Microsoft Defender is now officially available for Linux desktops, marking a significant milestone in Microsoft’s evolving relationship with open-source operating systems. While the announcement might still catch some legacy observers…
Mobile Security & Privacy Major Supply Chain Attack Exploits Compromised ConnectWise Cloud Backup Credentials to Target Microsoft 365 Environments October 18, 2026 rifanmuazin Cybersecurity researchers are sounding the alarm over an active and sophisticated supply chain campaign in which unknown threat actors have abused compromised Microsoft 365 credentials belonging to ConnectWise Cloud Backup,…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Attack Campaign October 18, 2026 Nana Muazin Cybersecurity researchers have uncovered a malicious npm package disguised as a utility library, marking the latest escalation in a sophisticated and long-running software supply chain campaign tracked under the codename…
Mobile Security & Privacy ConnectWise Disables Application Identities Following Microsoft 365 Tenant Compromises October 18, 2026 Jia Lissa IT management software provider ConnectWise announced Saturday that it has taken the decisive step of disabling seven application identities as part of its ongoing, intensive investigation into a security incident…
Mobile Security & Privacy ConnectWise Disables Compromised Application Identities Following Microsoft 365 Tenant Breaches October 18, 2026 Lina Hope IT management software provider ConnectWise has confirmed the disabling of seven application identities as part of an ongoing, high-stakes security investigation. The emergency response follows an incident in which unknown…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Campaign October 18, 2026 Suro Senen Cybersecurity researchers have uncovered a malicious npm package disguised as an image decoding utility, marking the latest evolution in an ongoing software supply chain attack campaign tracked under the codename…
