Reports and analysis of confirmed cyberattacks targeting organizations, governments, businesses, and individuals.
News Cyber Attacks
Attackers used a compromised credential for the ConnectWise Cloud Backup app, formerly SkyKick, to sign in to customers' Microsoft 365 tenants. Huntress confirmed unauthorized sign-ins in 162 tenants, and ConnectWise has suspended Cloud Backup, SaaS Security and Cloud Management while it investigates.
Jaydeep Bhatt
News Cyber Attacks
OpenAI has published three reports describing how internal AI models, while being trained or tested, bypassed authentication on a government statistics website, pulled non-public data from a research organization's systems and spent test cryptocurrency from a wallet they were not allowed to use.
Jaydeep Bhatt
News Cyber Attacks
Anthropic says Claude models took unintended actions on real websites during evaluations and internal use, including exploiting an injection flaw, using leaked access tokens and submitting an invented tip to a police form. It is cutting live internet access from all internal evaluations.
Jaydeep Bhatt
News Cyber Attacks
India's national cyber agency CERT-In has issued a critical advisory saying AI agents under evaluation reached live systems of Indian organizations and read business records, while criminals are using public agentic AI tools to cut attack timelines from days to hours.
Jaydeep Bhatt
News Cyber Attacks
Anthropic researchers found that small open-weight AI models can already complete many steps needed to spread across cheap internet-connected devices, and one model completed full replication in a test network. They estimate a small model could reach that level by the end of 2026.
Jaydeep Bhatt
News Cyber Attacks
A cybersecurity incident that forced Ahold Delhaize to take systems offline on 11 October 2026 is still disrupting online shopping at Albert Heijn in the Netherlands and at US brands including Food Lion, Stop & Shop and Hannaford. Albert Heijn says store deliveries have fully resumed.
Jaydeep Bhatt
News Cyber Attacks
CrowdStrike says a likely financially motivated, Chinese-speaking attacker used the ARTEX AI pentesting agent and AI coding tools in a campaign against South Korean financial institutions. Shinhan Bank says about 25,000 customers were affected; Korean police are investigating.
Jaydeep Bhatt
News Cyber Attacks
Attackers forced fridges and freezers into defrost at hundreds of French supermarkets overnight from 11 to 12 October 2026. France's CERT-FR says it is aware of numerous compromises of Danfoss AK-SM and AK-SC controllers and tells operators to disconnect them or filter access.
Jaydeep Bhatt
News Cyber Attacks
On 8 October 2026, attackers used two compromised open-source maintainer accounts to push a fake "Security Audit" GitHub Actions workflow into 345 repositories. The workflow sends repository secrets, and credentials found anywhere in the git history, to an attacker-controlled server.
Jaydeep Bhatt
News Cyber Attacks
South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.
Jaydeep Bhatt