⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

Summary: ConnectWise disabled seven application identities and suspended its Cloud Backup service by revoking certificates for affected application connections across all users after unknown threat actors obtained unauthorized access to those identities and compromised Microsoft 365 tenants, with the action taken on October 17, 2026, at 07:00 UTC. The weekly recap also lists a large batch of vulnerabilities across Progress Software MarkLogic Server, GitLab, SAP, Adobe, Microsoft Windows, Google Chrome, Mozilla Firefox, Citrix, Cisco, Fortinet, Ivanti, Palo Alto Networks and others, alongside reports of rogue AI agents and a $100M crypto theft.
Bottom line: The ConnectWise incident ran through application identities and a backup service that customers trusted, and revoking certificates across all users was the response - a reminder that the access you grant to a vendor's integration is access an attacker can inherit.

Read the original at The Hacker News ↗

Topics: Data Breaches
Mentions: CVE-2026-0322 CVE-2026-0702 CVE-2026-100133 CVE-2026-102523 CVE-2026-102866 CVE-2026-103521 CVE-2026-103522 CVE-2026-103523 CVE-2026-103524 CVE-2026-103526 CVE-2026-103527 CVE-2026-103528 CVE-2026-103529 CVE-2026-103535 CVE-2026-103537 CVE-2026-103848 CVE-2026-103849 CVE-2026-104937 CVE-2026-105016 CVE-2026-105445 CVE-2026-105895 CVE-2026-105899 CVE-2026-105903 CVE-2026-106173 CVE-2026-10631 CVE-2026-106612 CVE-2026-106619 CVE-2026-106620 CVE-2026-106621 CVE-2026-106622 CVE-2026-106624 CVE-2026-106626 CVE-2026-106629 CVE-2026-106630 CVE-2026-107248 CVE-2026-107656 CVE-2026-107814 CVE-2026-107815 CVE-2026-107819 CVE-2026-107821 CVE-2026-108184 CVE-2026-108185 CVE-2026-108398 CVE-2026-109704 CVE-2026-109733 CVE-2026-110005 CVE-2026-110136 CVE-2026-110148 CVE-2026-110149 CVE-2026-110151 CVE-2026-110152 CVE-2026-110161 CVE-2026-110165 CVE-2026-110447 CVE-2026-110922 CVE-2026-14814 CVE-2026-16301 CVE-2026-16753 CVE-2026-16823 CVE-2026-16916 CVE-2026-19491 CVE-2026-39919 CVE-2026-39949 CVE-2026-48382 CVE-2026-48383 CVE-2026-50055 CVE-2026-53418 CVE-2026-53420 CVE-2026-53562 CVE-2026-53563 CVE-2026-53564 CVE-2026-65674 CVE-2026-70242 CVE-2026-73571 CVE-2026-74580 CVE-2026-75732 CVE-2026-75994 CVE-2026-76519 CVE-2026-78401 CVE-2026-78406 CVE-2026-83498 CVE-2026-83662 CVE-2026-84419 CVE-2026-84420 CVE-2026-85947 CVE-2026-85948 CVE-2026-85955 CVE-2026-85956 CVE-2026-89107 CVE-2026-89108 CVE-2026-89110 CVE-2026-89111 CVE-2026-89113 CVE-2026-90530 CVE-2026-90531 CVE-2026-90532 CVE-2026-91013 CVE-2026-9191 CVE-2026-9192 CVE-2026-92464 CVE-2026-92707 CVE-2026-92883 CVE-2026-92909 CVE-2026-93635 CVE-2026-93637 CVE-2026-96951 CVE-2026-97229 CVE-2026-99999
Related: Two Critical Mark Logic Flaws Could Give Delegated Managers Persistent Admin Control Cyber Risks ·
Microsoft Patches Record 1,413 Flaws, Including Exploited Windows Shell Bug Cyber Risks ·
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation Cyber Risks ·