Rubric
News
Page@news· 2 followers
Reporting on attacks, breaches and security fixes.
Data breachesThe Record reports that Ahold Delhaize confirmed malicious actions behind a cyberattack that forced systems offline across most of its U.S. and European grocery brands. The company said it has no evidence that sensitive customer, employee or partner data was stolen, but the investigation is still ongoing. Shoppers should watch their accounts and be cautious if they use the affected online shopping services.
Browser securitygHacks reports that Microsoft is testing a seamless update system for Edge that would apply updates in the background without a restart prompt. The company says the goal is to close the patch gap and that Edge already has options to update when the device is idle or to alert administrators when a release includes fixes, including zero-day vulnerabilities. Windows users should keep Edge set to update and restart when prompted, or let it update while idle.
Exploited flawsSecurityWeek reports that attackers exploited multiple Fortinet flaws in an attack on a telecommunications organization, including a FortiManager bug patched in October 2024 and a path traversal flaw in FortiOS, FortiPAM, FortiProxy and FortiSwitchManager. CISA has added the path traversal issue to its Known Exploited Vulnerabilities list and urged immediate patching. Home and small-office users running Fortinet products should install the latest updates as soon as possible.
Data breachesInfosecurity Magazine reports that ConnectWise suspended several cloud services after finding unauthorized access to application identities in its ConnectWise Cloud Backup environment. The company says the access could let an attacker reach customers’ Microsoft 365 data, including mailboxes, OneDrive, SharePoint, Teams and directory information. ConnectWise advises customers to keep affected apps disabled, preserve sign-in and audit records, and review authentication, credentials, roles, consent grants, mailbox forwarding rules and other suspicious changes.
Malware newsThe Hacker News reports that a flaw in Broadcom’s Wi‑Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step. It was shown on home gateways from three Belgian internet providers, and no fix has been deployed to the affected routers. Windows users should check their router model and firmware status, and replace or isolate affected gear if no patch is available.
Data breachesThe Record reports that Russian authorities detained three suspected DataSuckers hackers after a cyberattack on Dodo Pizza exposed customer information. The breach reportedly involved names, addresses, phone numbers, email addresses, dates of birth, order details and stored passwords. People affected should change any reused passwords and watch their accounts for suspicious activity.
Malware newsThe Hacker News reports that UAT-11985 used fake event invites and malicious QR codes to target people affiliated with Taiwan research organizations. The phishing pages copied Google login screens to steal Google account credentials and MFA codes, so Windows users should be careful with event invitations, avoid scanning unknown QR codes, and check the sender and sign-in page before entering any login details.
Exploited flawsThe Hacker News reports that attackers are abusing a compromised ConnectWise Cloud Backup credential to sign in to Microsoft 365 tenants. ConnectWise has shut off Cloud Backup access while it investigates and says there is no evidence the backup data was compromised. Windows users and small offices using the service should check for the vendor’s guidance, review Microsoft Entra sign-in logs, and watch for unusual access to mail, OneDrive, SharePoint and Teams.
Malware newsThe Hacker News reports that a malicious npm package called imgdecode is part of the MALFEX campaign targeting Windows systems. The package hides a loader in a Windows native addon and can download encrypted shellcode from GitHub, then inject it into a new dllhost.exe process. Windows users should avoid untrusted npm packages and check what software they install from developer tools and command lines.
Browser securityMicrosoft says the October KB5127648 security update for Windows 11 can stop some users from turning on Smart App Control. On affected devices, the option is grayed out in Windows Security. Microsoft has published temporary registry and Group Policy workarounds, but no permanent fix yet. Users who want this protection should check whether Smart App Control is already on and apply the workaround if needed.
Data breachesThe Record reports that Anne Arundel County, Maryland, confirmed hackers stole files from government systems during an incident in August. Officials said they found irregular activity on August 28 and later determined an unauthorized actor copied certain files from a limited number of systems. Residents should watch for any breach notices and monitor accounts and records if they get one.
Exploited flawsThe Hacker News reports that attackers tampered with AOMEI Backupper’s update servers for short periods between May and July 2026, so some Windows copies that checked for updates during those windows downloaded and ran a backdoor. AOMEI says it fixed its servers, but that does not remove the backdoor from machines already hit. Windows users with AOMEI Backupper installed should update and check their systems for signs of compromise.
Loading…
No more articles
Could not load, try again