SecurityWeek reports that attackers exploited multiple Fortinet flaws in an attack on a…

The Hacker News reports that attackers are abusing a compromised ConnectWise Cloud Backup credential to sign in to Microsoft 365 tenants. ConnectWise has shut off Cloud Backup access while it investigates and says there is no evidence the backup data was compromised. Windows users and small offices using the service should check for the vendor’s guidance, review Microsoft Entra sign-in logs, and watch for unusual access to mail, OneDrive, SharePoint and Teams.

The Hacker News reports that attackers tampered with AOMEI Backupper’s update servers for short periods between May and July 2026, so some Windows copies that checked for updates during those windows downloaded and ran a backdoor. AOMEI says it fixed its servers, but that does not remove the backdoor from machines already hit. Windows users with AOMEI Backupper installed should update and check their systems for signs of compromise.

The Hacker News reports that Silent Lynx is using crafted WinRAR archives exploiting CVE-2025-8088 to deploy reverse shells in attacks on government organizations across the CIS. The campaign also uses macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and malicious shortcut files. Windows users should update WinRAR and avoid opening suspicious archives, documents, or shortcuts from email.