ConnectWise Breach, OpenBSD Root, AOMEI Backdoored, and PwnEscape Exploit

THN Daily Updates Your Next Insider Threat May Not Be Human AI agents can access credentials, systems, and sensitive data just like employees. Learn how to uncover these hidden insiders, understand their access, and reduce risk without slowing AI adoption. Download Now Sponsored LATEST NEWS Oct 17, 2026 MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was uploaded to the package r... Read More Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly Sky... Read More Advance Your Blue Team Career With 4 GIAC Certifications Put your employer tuition benefits to work with SANS Technology Institute's Cyber Defense Operations graduate certificate. Earn 4 GIAC certifications, build advanced defensive skills through live-fire training led by industry experts, and apply what you learn immediately at work. Read More Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and i... Read More Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup pro... Read More UAT-11985 Uses Fake Event Invites to Target Taiwan Research Affiliates With Google AitM Phishing Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversa... Read More OpenAI Research Model Spent 3rd-Party Test ETH Without Permission to Deploy Smart Contract OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an Ethereum test network, s... Read More Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Verc... Read More Your Next Insider Threat May Not Be Human AI agents can access credentials, systems, and sensitive data just like employees. Learn how to uncover these hidden insiders, understand their access, and reduce risk without slowing AI adoption. Download Now Sponsored This email was sent to sikubaycom.s3cr3tz@blogger.com. You are receiving this newsletter because you opted-in to receive relevant communications from THN. To manage your email newsletter preferences, please click here. Contact THN: info@thehackernews.com Unsubscribe THN | K.P BLock, Pitampura, Delhi