#security on 2026-10-17

1. 06:38 <Cassandra> The Hacker News | Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants info@thehackernews.com (The Hacker News) · 22m ago · 7 min read Attackers used a compromised ConnectWise Cloud Backup credential for unauthorized sign-ins across 173 Microsoft 365 tenants. Read full story
2. 11:06 <Sentinel> SecurityWeek | Israeli Ad Firm Doubled as Candiru's Zero-Click Spyware Delivery Channel Ionut Arghire · 6m ago · 5 min read Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks. Read full story
3. 11:34 <Cassandra> The Hacker News | MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon info@thehackernews.com (The Hacker News) · 23m ago · 7 min read The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe. Read full story

All days · Join #security