Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

The Hacker News - Oct 17, 2026

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

Read full article

More News

article.head.headline
Oct 16, 2026
Terry Tao Is on the Front Lines of the Debate Over AI and the Future of Math

The Fields Medalist Terence Tao is on the front lines of a debate about artificial intelligence and the future of his field.

article.head.headline
Oct 16, 2026
The Leap Second Has Been Canceled

Earth’s rotation subtly changes the length of the day. Now our clocks won’t change with it — at least not for a very long time.

article.head.headline
Oct 16, 2026
Why No One Can Look Away From Elizabeth Holmes

“I felt like there were some moments in the film where she was just brazenly lying.”

article.head.headline
Oct 16, 2026
Presidential adviser says Ukraine is in talks to lift speed limit on military satellite network

Presidential adviser says Ukraine is in talks to lift speed limit on military satellite network

article.head.headline
Oct 16, 2026
Citizen Science Groups Grapple With the Rise of A.I. Slop

Facing a flood of A.I. slop, groups bent on democratizing science create new checks and balances.

article.head.headline
Oct 16, 2026
Toxic algorithms wouldn't let them go - now Australia wants an off switch

Australia has proposed a switch to force social media platforms to let users turn off recommended content.

article.head.headline
Oct 16, 2026
Alberta removes habitat protections for endangered greater sage grouse to support industrial development

Habitat protections for one of Canada's most imperiled animals have been quietly removed by the Alberta government. Through amendments to the Public Lands Act in July, the province eliminated protections for greater sage grouse in designated protection and recovery zones. That same month, helium extraction company Thor Resources had a site approved within the bird's habitat.

article.head.headline
Oct 16, 2026
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections. Security firm Calif, which found and reported the flaws, published a detailed writeup and full proof-of-concept code after OpenBSD shipped

article.head.headline
Oct 16, 2026
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis

article.head.headline
Oct 16, 2026
Apple’s $1,999 foldable iPhone Duo preorder sells out in minutes, deliveries pushed to late January

Apple’s $1,999 foldable iPhone Duo sold out within minutes of preorders opening, with delivery estimates extending to late January, according to reports. The launch marks Apple’s entry into a foldable smartphone market dominated by established rivals.

article.head.headline
Oct 16, 2026
The healthiest meals in your supermarket's freezer aisle - from Sainsbury's to M&S, the short-cut dinners that are even better than the fresh version

Researchers have identified a simple way to save over £100 a month on your food bills. Don't buy fresh, buy frozen.

article.head.headline
Oct 16, 2026
UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google account credentials and multi-factor authentication (MFA) codes. The activity is being tracked by


Science Of The World

Science Of The World offers breaking in-depth news about the latest scientific discoveries and technologies in a user-friendly format.

NEWSLETTER