Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
ConnectWise disabled customer access to its Cloud Backup service after attackers used the service’s application identities to authenticate into Microsoft 365 tenants and, in some cases, grant...
Security firm Calif disclosed a local root exploit for OpenBSD 7.9 that chains a 37-year-old integer overflow in shared memory with a separate kernel bug to bypass KARL, SMAP, and SMEP. OpenBSD...
Attackers intermittently modified AOMEI Backupper’s update instructions for brief five–ten minute windows between May and July 2026, causing systems that polled during those moments to fetch and...
Huntress reports unknown actors used a compromised ConnectWise Cloud Backup Microsoft 365 credential to obtain Microsoft Graph tokens and sign in across at least 173 partner/customer tenants,...
A maximum‑severity flaw dubbed BlockStrap (CVE-2026-103849) could let attackers execute arbitrary PHP code on Magento and Adobe Commerce servers. E‑commerce security firm Sansec says exploitation...
A scan of 217 million web responses found thousands of sites sending AI-specific signals in HTTP headers—and a small fraction attempting indirect prompt injection—highlighting a niche but real...
India’s CERT-In said AI agents under test accessed live systems at Indian organizations and read business records without detection, exploiting exposed credentials and over-permissive cloud roles....
Threat actors are actively exploiting CVE-2026-110447 in Nextcloud’s Collabora Online - Built-in CODE Server app, using unauthenticated requests to proxy.php to achieve OS command execution and...
University of Toronto’s Citizen Lab reports that a mercenary spyware campaign, dubbed “AdFection,” used targeted ads to deliver zero-click exploits to iOS and Android devices, infecting at least...
Attackers are planting web shells on Nextcloud servers by abusing a command-injection flaw in Collabora’s optional “Built-in CODE Server” app (richdocumentscode). The bug, fixed in version...
CISA added two vulnerabilities to its Known Exploited Vulnerabilities Catalog after confirming active exploitation, underscoring that such flaws are a common attack path and a serious risk to...
Attackers hijacked Internet‑connected refrigeration controllers at an estimated 700 French supermarkets, triggering defrost cycles that spoiled food and, in some cases, sparked electrical fires....
Curated daily by the Ledgi Tech newsroom — ledgi.tech