World watch

ConnectWise investigates unauthorized access to Cloud Backup identities and suspends cloud services after a cyberattack. Services remain unavailable.

Threat actors weaponized the Plex2Shell exploit chain against Plex servers hours after disclosure, delivering cryptocurrency miners and proxy software.

Intruders used compromised credentials to access an ETS SFTP server and copy millions of California student records back to 2006. SecurityWeek reported the...

Spyware was found on devices of prominent Serbian critics, including a rector and a prosecutor, weeks before parliamentary elections.

MITRE ATT&CK v20 catalogs AI abuse, MFA bypass, and water utility attacks. It adds 15 detection strategies and 38 analytics. SecurityWeek reported the release.

Ransomware.live lists new victims from N0n, Aurora and Helix, with exposure details for some organizations and pending exposure for others.

Anthropic acquired Opaque Systems, a confidential AI startup that protects sensitive data. SecurityWeek reported the deal on 2026-10-19.

Ransomware.live listed four new victims on 2026-10-19: three by Storm and one by N0n, including a healthcare support services firm in the United States.

ConnectWise stopped SaaS backup, security, and management services to probe a security issue. Huntress alleges takeover of M365 accounts.

Malware News reports N0n ransomware targets BNCT Busan New Container Terminal and Santos Brasil. Review exposure and backups.

CVE-2026-99999 is a Linux KVM guest-host escape called PwnEscape. The Register reported it on 2026-10-19. The flaw has a 9.3 rating and is rated critical.

Ransomware.live reported three new victim postings by N0n and Qilin in the last 18 hours, including Amagi Media Labs and a pending South Korean IT services...

Cloak listed two new victims in Switzerland and Germany. Data sizes are 87GB and 2TB. Status is private. The report comes from Ransomware.live.

Ransomware.live lists N0n victims in Egypt and Massachusetts with exposed training and tax records.

N0n published SMIC US Company as a ransomware victim. Exposed data includes business, payroll, and financial records. The report comes from Ransomware.live.

Malware News published a report on 2026-10-18 that mentions Kimsuky and SK. The source contains limited readable detail about the event reported.

Malware News published a YARA rule to detect orphaned VBA projects inside DWG files on October 18, 2026. The rule targets DWG files.

Qilin published Llano Independent School District as a new victim on 18 October 2026 at 13:49 UTC. Ransomware.live reported the listing.

Iah6477 listed mckenneys as a ransomware victim. The reported data size is 295.9 GiB. Ransomware.live published the item on 2026-10-18. Security teams can...

Malware News reports more NHS staff dismissed for accessing Nottingham stabbing victims' medical records; total sacked is 15.