Comparing 24 October 2026 with the previous day 17 October 2026.
The report shows that a UEFI bootkit is using an old Secure Boot vulnerability in an active espionage campaign while attempting to tamper with Kaspersky and Avast security software.
No changes in this category.
No changes in this category.
The report describes an active supply-chain attack via a compromised ConnectWise Cloud Backup credential that allows attackers to directly breach Microsoft 365 tenants.
The attack shows that compromised application identities at a backup provider can lead directly to Microsoft 365 tenant takeover, making supply-chain risk a matter of delegated cloud permissions, not just software.
The BSI WID reports multiple vulnerabilities in Synology DSM without CVE or exploitation status; for operators, the patch status of the NAS operating system is relevant.
The alert does not provide CVE IDs, versions, or exploitation status, and therefore adds no concrete patch information beyond general browser hardening.