Home
Guides
Projects
Cybersec

cloud

OVHcloud CLI Releases Were Swapped for a Secret-Stealing Build for 94 Minutes

OVHcloud CLI Releases Were Swapped for a Secret-Stealing Build for 94 Minutes

Attackers used a hijacked developer account to replace OVHcloud CLI v0.11.0 to v0.15.0 binaries on GitHub with a secret-stealing build on October 19. If you installed or updated in that window, rotate every secret on the machine and move to v0.16.0.

Attackers Used ConnectWise Cloud Backup App Identities to Get Into Microsoft 365 Tenants

Attackers Used ConnectWise Cloud Backup App Identities to Get Into Microsoft 365 Tenants

Attackers abused application identities from ConnectWise Cloud Backup, formerly SkyKick, to sign in to customer Microsoft 365 tenants. ConnectWise has suspended the service. MSPs need to disable the apps in every tenant and hunt for added credentials.

PwnEscape (CVE-2026-99999): A Linux IPv4 Stack Bug Lets a VM Escape to Its Host

PwnEscape (CVE-2026-99999): A Linux IPv4 Stack Bug Lets a VM Escape to Its Host

PwnEscape (CVE-2026-99999) is a critical bug in the Linux host's IPv4 stack, not KVM, that lets a guest VM read host memory, crash the host and, in the lab, run code on it. Proxmox, Debian and Fedora have fixes, but they only help after a reboot.

AWS Will Cut Its European Sovereign Cloud Off From the Global Backbone for Several Hours on Saturday

AWS Will Cut Its European Sovereign Cloud Off From the Global Backbone for Several Hours on Saturday

On Saturday, October 24, AWS plans to run its European Sovereign Cloud for several hours without the AWS Global Network backbone, using only EU internet providers. Here is what AWS says will happen, and what customers may notice.

THE JDNEER © 2026

Consulting
My Software

Powered by Ghost