Breaches
ConnectWise Suspends Cloud Backup After Credential Breach
One compromised ConnectWise backup credential opened Microsoft 365 tenants across 162 organisations. Rotating the vendor key is not enough.
privilege escalation
CyberROI coverage tagged “privilege escalation”.
Vulnerabilities
OpenBSD Root Exploit Chains 37-Year-Old Shared-Memory Bug
Calif chained a 37-year-old SysV integer overflow with an OOB write to get root on OpenBSD 7.9 past KARL, SMAP and SMEP — and the PoC is already public.