Cyber Threat Intel Daily Briefing — 2026-10-18

CYBER THREAT INTEL

DAILY BRIEFING · 2026-10-18 12:15 UTC · REPORT BRIEF-20261018-121523

OPEN // LE

01

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. […]

SRC: BleepingComputer Sat, 17 Oct 2026 10:32:48 -0400 https://www.bleepingcomputer.com/news/security/drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon/

02

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 119

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime   AI models may be capable of self-replicating without acces

SRC: Security Affairs Sun, 18 Oct 2026 09:10:15 +0000 https://securityaffairs.com/201230/malware/security-affairs-malware-newsletter-round-119.html

03

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are liste

SRC: The Hacker News Sun, 18 Oct 2026 13:53:02 +0530 https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html

04

Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. North Korean IT Workers Used Stolen US Identities to

SRC: Security Affairs Sun, 18 Oct 2026 08:37:32 +0000 https://securityaffairs.com/201218/breaking-news/security-affairs-newsletter-round-600-by-pierluigi-paganini-international-edition.html

05

North Korean IT Workers Used Stolen US Identities to Earn $3 Million

The FBI raided 40 Texas homes over a North Korean scheme that used fake IT workers to target 70 US companies and generate $3 million. The Justice Department (DoJ) announced coordinated enforcement actions this week targeting North Korea’s long-running scheme to place fake IT workers inside American

SRC: Security Affairs Sat, 17 Oct 2026 16:29:10 +0000 https://securityaffairs.com/201193/intelligence/north-korean-it-workers-used-stolen-us-identities-to-earn-3-million.html

06

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. […]

SRC: BleepingComputer Sat, 17 Oct 2026 11:18:51 -0400 https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/

07

US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars

CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. The post US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars appeared first on SecurityWeek.

SRC: SecurityWeek Sun, 18 Oct 2026 11:00:00 +0000 https://www.securityweek.com/us-cybersecurity-job-postings-fall-26-as-ai-security-engineer-demand-soars/

[ SOURCE ] OpenPhish (18 indicator(s))