Cyber Attack | AppSecNews

Illustration of a cloud backup vault with a glowing stolen key plugged into it, opening doors to rows of office tenant buildings.

News Cyber Attacks 19 Oct 2026, 08:49 UTC

ConnectWise suspends Cloud Backup after stolen app credential is used to access Microsoft 365 tenants

Attackers used a compromised credential for the ConnectWise Cloud Backup app, formerly SkyKick, to sign in to customers' Microsoft 365 tenants. Huntress confirmed unauthorized sign-ins in 162 tenants, and ConnectWise has suspended Cloud Backup, SaaS Security and Cloud Management while it investigates.

Jaydeep Bhatt

Illustration of a supermarket aisle with stocked shelves on one side and a dark, disconnected online shopping screen and delivery van on the other.

News Cyber Attacks 16 Oct 2026, 11:04 UTC

Ahold Delhaize cyber incident: Albert Heijn stores restocked, but online orders still down

A cybersecurity incident that forced Ahold Delhaize to take systems offline on 11 October 2026 is still disrupting online shopping at Albert Heijn in the Netherlands and at US brands including Food Lion, Stop & Shop and Hannaford. Albert Heijn says store deliveries have fully resumed.

Jaydeep Bhatt

Illustration of a supermarket freezer aisle glowing red-hot, with a refrigeration control panel showing a heating symbol.

News Cyber Attacks 14 Oct 2026, 05:40 UTC

Attackers hijack Danfoss refrigeration controllers at French supermarkets

Attackers forced fridges and freezers into defrost at hundreds of French supermarkets overnight from 11 to 12 October 2026. France's CERT-FR says it is aware of numerous compromises of Danfoss AK-SM and AK-SC controllers and tells operators to disconnect them or filter access.

Jaydeep Bhatt

Illustration of a code repository tree where one glowing workflow file sends a stream of keys out to a distant server.

News Cyber Attacks 14 Oct 2026, 05:40 UTC

GhostAction hijacks maintainer accounts to plant secret-stealing GitHub workflows

On 8 October 2026, attackers used two compromised open-source maintainer accounts to push a fake "Security Audit" GitHub Actions workflow into 345 repositories. The workflow sends repository secrets, and credentials found anywhere in the git history, to an attacker-controlled server.

Jaydeep Bhatt

Cybersecurity illustration representing attacks against South Korean financial institutions and investigation into possible AI-assisted hacking

News Cyber Attacks 6 Oct 2026, 07:23 UTC

South Korea Investigates Cyberattacks on Financial Firms Amid Possible AI Use

South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.

Jaydeep Bhatt

Citrix NetScaler zero-day vulnerability affecting enterprise network gateways

News Vulnerabilities & Zero-Days 5 Oct 2026, 13:13 UTC

Citrix NetScaler Zero-Day CVE-2026-88779 Exploited in Targeted Attacks

Citrix has released emergency security updates for a high-severity NetScaler vulnerability, CVE-2026-88779, after confirming that attackers are exploiting the flaw in targeted attacks. The vulnerability can cause denial-of-service on affected NetScaler deployments using SAML authentication.

Jaydeep Bhatt