Daily Brief
Daily Brief, October 18, 2026
Cyberr Brief2 stories
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
ConnectWise shut down customer access to its Cloud Backup service after attackers accessed application identities and compromised Microsoft 365 tenants. It matters because a supplier compromise can give direct access into customer environments, including managed Microsoft 365 tenants.
What to do
BleepingComputer↗Review third-party apps and service accounts with Microsoft 365 access, and disable anything no longer needed.
Drupal patches critical RCE flaws, warns exploits may emerge soon
Drupal patched two critical vulnerabilities that could allow remote code execution on websites running any supported version of the CMS. The vendor warned exploits may emerge soon, so unpatched sites could be exposed quickly.
What to do
BleepingComputer↗Patch supported Drupal sites now and prioritise any internet-facing instances in your change window.