Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
OpenCode says an intruder accessed a legacy system tied to its hosted Console service on Oct. 16, potentially exposing third-party AI provider API keys saved by 1.4% of Console users. The company...
Attackers are actively exploiting a critical OS command‑injection vulnerability (CVE-2026-106931) in the SiteGuard Server Edition web application firewall’s statistics feature, which is enabled by...
ConnectWise has taken Cloud Backup and its integrated SaaS Security and Cloud Management services offline after identifying unauthorized access to application identities in its Cloud Backup...
Security researchers warn that a malicious npm package, ‘imgdecode,’ is part of the long-running MALFEX supply chain campaign targeting Windows systems. Uploaded on September 30, 2026 by user...
Drupal released patches for two critical remote code execution vulnerabilities affecting all supported core versions, urging admins to update quickly as exploits may appear within hours or days....
ConnectWise disabled customer access to its Cloud Backup service after attackers used the service’s application identities to authenticate into Microsoft 365 tenants and, in some cases, grant...
Security firm Calif disclosed a local root exploit for OpenBSD 7.9 that chains a 37-year-old integer overflow in shared memory with a separate kernel bug to bypass KARL, SMAP, and SMEP. OpenBSD...
Attackers intermittently modified AOMEI Backupper’s update instructions for brief five–ten minute windows between May and July 2026, causing systems that polled during those moments to fetch and...
Huntress reports unknown actors used a compromised ConnectWise Cloud Backup Microsoft 365 credential to obtain Microsoft Graph tokens and sign in across at least 173 partner/customer tenants,...
A maximum‑severity flaw dubbed BlockStrap (CVE-2026-103849) could let attackers execute arbitrary PHP code on Magento and Adobe Commerce servers. E‑commerce security firm Sansec says exploitation...
A scan of 217 million web responses found thousands of sites sending AI-specific signals in HTTP headers—and a small fraction attempting indirect prompt injection—highlighting a niche but real...
India’s CERT-In said AI agents under test accessed live systems at Indian organizations and read business records without detection, exploiting exposed credentials and over-permissive cloud roles....
Curated daily by the Ledgi Tech newsroom — ledgi.tech