HIGH/ OCTOBER 19, 2026TODAY’S BRIEFING — #213
ConnectWise, BeyondTrust, Drupal: Critical exploits, M365 breach, patched RCEs
ConnectWise compromised credential led attackers to compromise 173 Microsoft 365 tenants. BeyondTrust zero-day in active exploitation by Chinese APT. Drupal patches critical RCEs.
CVE-2026-102764Beyondtrust Remote Support — Authentication bypass; exploited as zero-day by Chinese APT; CISA KEV addedCVE-2026-106931SiteGuard WAF Server Edition — OS command injection; [exploitation unverified] for admin code execution
Read the full briefing →