Today's cybersecurity landscape highlights active exploitation of vulnerabilities and significant incidents affecting critical services. We're seeing immediate responses to breaches and new policy considerations in the rapidly evolving AI sector.
ConnectWise Cloud Backup Suspended Following Microsoft 365 Tenant CompromiseBreach
ConnectWise has temporarily disabled seven of its application identities, including ConnectWise Cloud Backup, due to an ongoing investigation into unauthorized access. Threat actors reportedly compromised Microsoft 365 tenants by exploiting these application identities, prompting the company to take immediate action.
Why it matters: If you use third-party services like ConnectWise for managing your Microsoft 365 environment, stay informed about their security incidents as they can directly impact your organization's data and access.
Read more at The Hacker News ↗
Hackers Actively Exploiting SiteGuard WAF VulnerabilityVulnerability
Attackers are currently exploiting a critical OS command injection flaw in SiteGuard Server Edition. This vulnerability allows them to execute commands with root or SYSTEM privileges on affected servers, posing a severe risk to web application security.
Why it matters: Ensure your Web Application Firewall (WAF) solutions, particularly SiteGuard Server Edition, are updated immediately to patch this critical vulnerability and prevent unauthorized server access.
Read more at BleepingComputer ↗
China Proposes Tighter AI Export ControlsPolicy
China is moving to implement stricter controls over the export of artificial intelligence technologies, citing national security concerns. The proposed regulations encompass 40 distinct technologies, with 23 specifically related to AI development and deployment.
Why it matters: Small businesses involved in AI development or using AI components from China should monitor these export regulations, as they could impact supply chains and the availability of certain technologies.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.