SparTech Software

OpenCode says an intrusion may have exposed API keys for OpenAI, Anthropic and Google users, affecting 1.4% of Console accounts.

GhostAction attackers hid a credential stealer in a fake font across 94 GitHub repositories, using VS Code tasks to target developer and cloud secrets.

Citizen Lab confirms Pegasus infected a Serbian rector’s iPhone through a zero-click exploit, while an organized-crime prosecutor received an Apple warning.

A critical Linux networking flaw tracked as CVE-2026-99999 may let hostile KVM guests corrupt host packet data, disclose memory and execute code.

US cybersecurity postings dropped 26.4% through September, but AI security engineer demand tripled as employers shifted toward specialized skills.

ConnectWise suspended Cloud Backup and disabled seven application identities after attackers used compromised credentials to access Microsoft 365 tenants.

A compromised ConnectWise Cloud Backup credential enabled unauthorized Microsoft 365 access across 173 tenants, prompting urgent Entra app shutdowns.

Microsoft’s October 2026 Windows update defaults NTLMv1 SSO to enforcement, potentially disrupting Wi-Fi, Ethernet and VPN connections using MS-CHAPv2.

A cybersecurity incident at BAE Systems has halted bankruptcy notices nationwide, disrupting electronic and paper service across US federal courts.

China-linked attackers exploited a critical BeyondTrust Remote Support zero-day, deploying malware and targeting appliances that require urgent patching.