RF Wave

ConnectWise breached and more - October 18, 2026

ConnectWise breached and more - weekly security news and updates roundup for Oct 11-18, 2026

  • vulnerability
  • data breach

ConnectWise has confirmed they were victim of a data breach

Attackers breached Microsoft 365 tenants through compromised Cloud Backup application identities

This Week’s Updates

Breaches

  1. Daiichi Kosho confirms malware at contractor Nippon Columbia exposed 8.6 million karaoke app customer and employee records
  2. Ahold Delhaize confirms cyberattack forced it to take systems offline
  3. Intermarché and Coopérative U confirm a cyberattack knocked out refrigeration systems at French supermarkets
  4. Ledger confirms a hardware implant in devices sold by a reseller drained customers’ crypto wallets
  5. TFG London confirms a cyberattack disrupted IT systems at its Hobbs and Whistles retail brands
  6. UK Legal Aid Agency confirms stolen records from its 2025 breach date back to 1978
  7. BAE Systems confirms a cyberattack took down the US federal bankruptcy court notice system
  8. Burger King Japan confirms a breach of its app exposed 11 million customer records

Vulnerabilities

  1. GitLab patches maximum-severity CVE-2026-97229 flaw letting unauthenticated attackers execute code on self-managed servers
  2. SAP patches maximum-severity CVE-2026-89111 SSRF flaw in its Cloud SDK for Python that exposed OAuth2 credentials
  3. Docker patches CVE-2026-105445 flaw that let attackers impersonate Docker Hub users and tamper with images
  4. Ivanti patches actively exploited CVE-2026-104935 authentication bypass zero-day in Connect Secure
  5. Ghostscript fixes CVE-2026-39919 heap overflow that let crafted PDF uploads hijack servers
  6. Cisco patches actively exploited CVE-2026-76519 zero-day in Secure Email Gateway allowing root command execution
  7. Palo Alto Networks patches actively exploited CVE-2026-0322 RCE zero-day in the PAN-OS management interface
  8. Attackers exploit patched CVE-2026-110447 Collabora RCE flaw to backdoor Nextcloud servers
  9. BeyondTrust patches CVE-2026-102764 Remote Support zero-day exploited since August by suspected China-nexus hackers
  10. Adobe patches maximum-severity CVE-2026-103849 BlockStrap flaw in Magento and Adobe Commerce ahead of expected attacks
  11. Drupal patches two critical RCE flaws, CVE-2026-108097 and CVE-2026-108099, affecting all supported core versions