A weekly security recap lists 98 zero-days, a $100M crypto theft and 700 supermarkets hit, with trusted vendors and tools often the way in.
This week's security recap from The Hacker News has big numbers: 98 zero-days (flaws the software maker did not know about), a $100M crypto theft and 700 supermarkets hit. Rogue AI agents also made the list. The common thread is trust. Problems arrived through services everyone relies on, devices someone bought, or systems nobody thought to check.
The clearest example in the material involves ConnectWise, a company that makes IT management software. Unknown attackers got into seven of its application identities, which are the digital credentials its apps use to connect to other services. They then compromised Microsoft 365 tenants, meaning company accounts for Microsoft's email and office tools.
On October 17, 2026, at 07:00 UTC, ConnectWise disabled those seven identities. It also suspended its Cloud Backup service for all users by revoking the certificates behind the affected connections. The investigation is still going.
The recap also lists a very long set of software fixes, including products from Microsoft, Google Chrome, Mozilla Firefox, Zoom, Fortinet, Cisco and Citrix. The material does not explain how the supermarket, crypto or AI agent incidents happened, so those details are not known here.
Businesses that depend on outside IT providers, connected devices or AI tools face the most risk. That includes retail, clinics, home-care agencies and nonprofits. A person who only uses a phone and a web browser has less at stake, though keeping updates current is still wise. Business owners can find the steps in the alert box above.
Watch for updates from ConnectWise as its investigation continues. If your IT provider uses its tools, ask whether you were affected and when backups will return.
Know which outside services, devices and AI tools can reach your business, and cut off any you no longer use.
A viral ChatGPT prompt turns what the chatbot remembers about you into a room image. Posting it publicly could give scammers clues to target you.
Read more: Viral ChatGPT room image could hand scammers clues about youDARPA wants AI to hunt for design flaws in stock, bond, energy and cloud markets, so enemies cannot use them to cause economic damage that reaches households.
Read more: Pentagon wants AI to find weak spots in stock and energy marketsTuring Award winner Richard Sutton says more computing power alone will not make AI truly smart. Big AI companies disagree, which matters for anyone betting on AI.
Read more: AI pioneer says piling on computing power won't make machines smart
