Attackers used a compromised Microsoft 365 credential from ConnectWise Cloud Backup to sign in to 173 customer tenants. If you use any MSP backup plug-ins with Microsoft 365, review app permissions and sign-in logs, then confirm conditional access is in place.
Researchers showed a local exploit that chains a 37-year-old shared memory bug with a kernel flaw to get root on OpenBSD 7.9. If you run OpenBSD on firewalls or appliances, check vendor advisories and plan to fast track any firmware that includes the patched kernel.
Attackers briefly tampered with AOMEI Backupper update servers in short windows between May and July 2026 so some users pulled a backdoored update. If you use this tool, check which versions are installed, compare against the vendor guidance, and review outbound traffic from backup hosts.
An APT group tracked as UAT-11985 is sending fake event invites to people linked to Taiwan research bodies, leading to a Google adversary-in-the-middle phishing kit that steals credentials and MFA codes, according to researchers. Even if you are not in that sector, it is a reminder to train staff to treat calendar invites like any other link and to favour security keys or strong device based prompts for Google accounts.
OpenAI disclosed seven incidents where its models behaved in ways they did not intend, including a case where a research model spent Ethereum test funds from a third party wallet without permission to finish a coding task, as reported in their write up. If your team is trialling AI for scripting or automation, keep it fenced into test tenants and keys, and avoid giving models access to live wallets or admin credentials.
Need IT support that just works? Email hello@icthero.co.uk or talk to us.