-
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants. The disabled identities are listed below – ConnectWise Cloud Backup – 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Summary: One BIOS setting can stop a dock from updating, and two dock CVEs live in the update tools themselves. Here’s how docks end up unpatched, and what to check on DMA protection. The easiest way to leave a dock unpatched is to lock down the laptop it’s plugged into. Dell’s support article for the […]
The post Your Docking Station Has a Patching Problem appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. military recently completed its withdrawals from Iraq and Syria, ending a decade of leadership in the counterterrorism fight against the Islamic State in the Levant. The gradual drawdown was meant to avoid a sudden vacuum that proxy militias, malign regional actors, terrorist organizations, and great-power rivals could fill, as happened in Iraq and Afghanistan. Yet ISIS, while greatly reduced, persists in Iraq and Syria, which must now build a sustained regional counterterrorism effort to prevent the group’s resurgence.
The absence of an American footprint in the two countries reduces cost and risks to personnel, but it also diminishes visibility into ISIS networks, undermines security relationships, and eliminates a forward position from which Washington could detect and disrupt terrorist threats before they affect U.S. interests and foreign partners.
While ISIS has mounted fewer attacks in Iraq and Syria since 2025, this is evidence not of diminished capacity but of strategic recalibration. In Syria, ISIS has been busy diversifying its targets and methods. In June alone, ISIS attacked oil tankers, commercial trucks, security checkpoints, military regional headquarters, political figures, judges, and buses ferrying personnel from the Ministry of Defense. In July, a bomb killed 10 people at a Damascus café frequented by officials working in the Justice Palace. Two more bombs exploded during President Macron of France’s first state visit, killing 10 and 18 people near the Four Seasons Hotel and Ministry of Tourism respectively.
Counterterrorism infrastructure, never perfect to begin with, can erode quickly after American forces leave. This has been seen in the dissolution of the Counter-ISIS mission and the emptying of ISIS detention camps like Al Hol and Al Roj. It has also been seen in the region’s prisons. As ISIS has lost operational capacity and territory, the group has turned to prison breaks as a strategic imperative, undertaking campaigns like the “Breaking the Walls” Campaign of 2012-13 in Iraq to replenish its ranks.
The threat is acute in Iraq, which took in 5,700 ISIS-affiliated prisoners—not only Iraqis and Syrians, but residents of 61 other countries—after the SDF’s January collapse in northeast Syria. It put them in prisons that were already overcrowded and under-resourced, and accepted responsibility for their detention, interrogation, and trial. The U.S. presence had helped encourage the humane treatment of prisoners and fair trials for those charged with terror crimes, reducing ISIS’ ability to use the prisons for recruiting, networking and organizing. Now, the troops have departed amid real concerns about backsliding.
In Syria, concerns remain about whether Syrian forces can integrate effectively and quickly to sustain ISIS’ defeat, in the face of recent incidents like ISIS infiltration into the Syrian Army and recent high-profile plots and attacks beyond ISIS’ traditional area of operations. Syrian prisons have also been targeted for breakouts, including ISIS’ 2022 attack on Al Sinaa prison and a January attempt at the Shaddadi detention facility.
Throughout the fight against terrorist organizations in Iraq and Syria, American personnel provided intelligence, surveillance, reconnaissance, airpower, special operations capacity, logistics, and local partnerships to local forces. This allowed the U.S. and its partners to monitor and disrupt groups like the Islamic State and defeat its territorial caliphate, while also giving Washington on-the-ground insight into terrorist organizations’ rapidly evolving tactics, as well as local political and security dynamics.
Absent these resources, it is likely the number and severity of ISIS plots and attacks will increase. Washington, its partners, and the Iraqi and Syrian governments must find creative ways to fill the security gaps. Syrian and Iraqi neighbors—Jordan, Türkiye, Lebanon, and other regional players—must begin forging close relationships with Damascus and Baghdad. Without these relationships, the region risks losing years of counterterrorism progress—and the U.S. may be forced to intercede once again.
This commentary is published in coordination with the 2026 Global Security Forum, of which Defense One is a media partner.
Caroline D. Rose is a Senior Director at the New York City-based Soufan Center, a nonpartisan research institution, where she conducts research on the crime-terror nexus, security, counterterrorism, and U.S. defense policy with a focus on Iraq and Syria. She is a Senior Nonresident Fellow at both the New Lines Institute and Orion Policy Institute, both where she writes about trends in terrorism and geopolitics.
Dr. Julie Chernov Hwang is an Associate Professor of Political Science and International Relations at Goucher College. She is a Senior Research Fellow at the Soufan Center & a Harry Frank Guggenheim Distinguished Scholar with over a decade researching terrorist behavior, notably social networks, radicalization, commitment, role assignment, disengagement, rehabilitation, reintegration, repatriation, and deradicalization.
]]>¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor applications. ConnectWise said in its October 17 update, supplied for […]
The post Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,” was uploaded to the package registry on September 30, 2026, by a user named “malfexteste8.” It has been downloaded 979 times as of writing and is still available on npm as of writing. The latest version of
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds for five NIST elliptic curves in under 30 minutes, addressing a cryptographic mystery spanning roughly 25 years. Its October 16 report attributes the seeds to a standard C pseudorandom number generator initialized with Unix timestamps, rather than secret passphrases. Despite […]
The post Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server compromise without possessing valid WordPress credentials. […]
The post Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a separate out-of-bounds write to obtain root privileges. Calif researcher Andrew Griffiths published the “Big Fish” research on October 16, 2026, alongside public proof-of-concept code demonstrating exploitation with multiple kernel security protections enabled. The oldest vulnerability traces to a shared memory […]
The post OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and targets developer workstations through Visual Studio Code tasks. Jenn Gile identified 94 compromised repositories belonging to 66 owners, confirming the payload in all 79 repositories available for analysis. The remaining 15 were inaccessible. […]
The post GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that deploy ReverseRAT on Windows systems. The October 15, 2026, advisory classifies the threat as medium severity and highlights malware that can steal passwords, capture screenshots, and collect sensitive information. The campaign combines deceptive attachments, malicious Windows shortcuts, […]
The post SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


