Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants
China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. The Windows giant revealed this week that the attackers, tracked as Storm-0940, used an open source AI penetration-testing tool called ARTEX to automate attacks against Microsoft 365 environments. In some cases, they went from picking a target to gaining privileged cloud access in less than three hours. READ MORE...
Quest Diagnostics Reports Cyber Breach Affecting 'Certain Patient Records'
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients. In a Thursday regulatory filing, Quest Diagnostics reported "unauthorized access" to its Quanum Lab Services Manager, a platform where certain clients can place test orders and receive or look up their results. The company said it discovered the hack on Wednesday and notified federal law enforcement. READ MORE...
Capcom data breach exposes 11.7 million account records
Players who signed up for Capcom's online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company's web services and to play some of its games online. It detected suspicious activity on October 19 and confirmed the intrusion the same day. Capcom is the Japanese video game developer and publisher. READ MORE...
Hackers hijack exposed AI models to launch cyberattacks at victims' expense
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model's owner pays for the computing power. Symantec captured the agent's instruction set this summer through a honeypot posing as an unprotected AI service, researchers Priti More and Susmit Yenkar wrote. Its operators sent their entire working prompt to the decoy, expecting a live model on the other end to carry out the instructions. READ MORE...
Russia-linked hackers broke into NATO shipbuilder in latest espionage campaign
A Russia-linked hacker group broke into the network of a shipbuilder in a NATO member state during a two-month campaign that also targeted government agencies and other critical manufacturers, Symantec researchers said on Tuesday. The operation, conducted by operatives from APT28, also known as Fancy Bear, involved both familiar malware and a mysterious new piece of code. Symantec said the hacking campaign had a clear espionage goal and warned potentially vulnerable businesses to protect themselves. READ MORE...
China-nexus actor linked to attack on ConnectWise Cloud Backup
Security researchers have linked a China-nexus threat group to the supply-chain attack that abused ConnectWise Cloud Backup against Microsoft 365 tenants. The state-aligned group, tracked as Storm-0940, used an agentic AI pen-testing tool called Artex to automate attacks against hundreds of organizations across the globe, according to a report released Wednesday from Microsoft. "Nation-state actors are increasingly targeting the software supply chain... READ MORE...
Authorities disrupt nearly 11,000 cybercrime networks in Africa
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. Coordinated by Interpol, the operation involved authorities from 21 countries and private partners like Team Cymru, Kaspersky, Group-IB, and Fortinet, in a major crackdown on cybercrime across Africa. READ MORE...
Signal bug could let someone keep listening after you hang up
A recently disclosed flaw in Signal's calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0. RingRTC is the open-source library behind Signal's voice and video calling functionality, providing calling components for its mobile and desktop applications. The main concern is unwanted listening after someone believes a conversation has ended. READ MORE...
- ...in 1861, President Abraham Lincoln suspends the writ of habeas corpus in Washington, D.C. for all military-related cases.
- ...in 1929, The first transcontinental air service begins from New York to Los Angeles.
- ...in 1959, musical parodist and accordion virtuoso Alfred "Weird Al" Yankovic ("Eat It," "UHF") is born in Downey, CA.
- ...in 1988, the classic 8-bit video game Super Mario Bros. 3 is released by Nintendo.
