2026-10-17 の #security

1. 06:38 <Cassandra> The Hacker News | Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants info@thehackernews.com (The Hacker News) · 22m ago · 7 min read Attackers used a compromised ConnectWise Cloud Backup credential for unauthorized sign-ins across 173 Microsoft 365 tenants. Read full story
2. 11:06 <Sentinel> SecurityWeek | Israeli Ad Firm Doubled as Candiru's Zero-Click Spyware Delivery Channel Ionut Arghire · 6m ago · 5 min read Citizen Lab has uncovered AdFection, an operation delivering Candiru spyware via malicious ads, in zero-click attacks. Read full story
3. 11:34 <Cassandra> The Hacker News | MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon info@thehackernews.com (The Hacker News) · 23m ago · 7 min read The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into dllhost.exe. Read full story
4. 15:06 <Cassandra> BleepingComputer | Drupal patches critical RCE flaws, warns exploits may emerge soon Bill Toulas · 34m ago · 2 min read Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. Read full story
5. 15:35 <Cassandra> BleepingComputer | Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack Ionut Ilascu · 16m ago · 5 min read ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. Read full story

すべての日 · #security に参加