+ Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants; Shopify tells Australian store to stay shut after hijacked extensions divert shoppers; and more
Can't view this message? Click here to view it online.
iTnews

WEEKLY SECURITY WRAP

Tuesday October 20, 2026

  Security  

How one hacker used AI agents and a few thousand dollars to break into scores of sites

Ecommerce sites in Australia, Canada, US and Japan targeted.

By Raphael Satter

 

Latest Security News


Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants
  Security  

Stolen ConnectWise 'SkyKick' credential exposed Microsoft 365 tenants

Cloud Backup pulled worldwide as customers hunt for planted credentials valid until 2028.

By Juha Saarinen

 
Shopify tells Australian store to stay shut after hijacked extensions divert shoppers
  Security  

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

Malicious Javascript in add-ons sent shoppers to fake checkouts.

By Juha Saarinen

 
In Pictures: Preemptive Security Rapid7 Melbourne roundtable
  Security  

In Pictures: Preemptive Security Rapid7 Melbourne roundtable

A selection of photos from a recent iTnews roundtable lunch at Aerial in Melbourne.

By Staff Writer

 
Ex-OpenAI employee accused of planting device appears to have Saudi backing
  Security  

Ex-OpenAI employee accused of planting device appears to have Saudi backing

US prosecutors say.

By Andrew Goudsward and Aditya Soni

 
Australian gov, media networks reached by Israeli firm’s spy ads
  Security  

Australian gov, media networks reached by Israeli firm’s spy ads

Ads tied to mercenary spyware turned up on ANSTO and critical infrastructure networks.

By Juha Saarinen

 
 
 
 
In Pictures: Governing the agents of chaos Saviynt Melbourne roundtable
  Security  

In Pictures: Governing the agents of chaos Saviynt Melbourne roundtable

A selection of photos from a recent iTnews roundtable lunch at Woodside - Pan Pacific in Melbourne.

By Staff Writer

 
ASIC's security and data chiefs to leave in December
  Training & Development  

ASIC's security and data chiefs to leave in December

Corporate watchdog now wants a CISO, CDAO and "contract CTO".

By Ry Crozier

 
ASD’s Essential Eight replacement moves away from maturity ladder
  Security  

ASD’s Essential Eight replacement moves away from maturity ladder

Organisations will report security area by area.

By Juha Saarinen

 
Microsoft floats "risk cohorts" as patch load hits record size
  Security  

Microsoft floats "risk cohorts" as patch load hits record size

Tsunami of monthly fixes tops 1400 in October.

By Juha Saarinen

 
US raids 40 laptop farms for North Korean IT workers
  Security  

US raids 40 laptop farms for North Korean IT workers

But researchers expect disruption of "Famous Chollima" to be short-lived.

By Juha Saarinen

 
Attackers chain three Ivanti VPN zero-days for root access
  Security  

Attackers chain three Ivanti VPN zero-days for root access

One of the flaws awaits fix.

By Juha Saarinen

 
Investigators hunt French supermarket fridge hackers
  Security  

Investigators hunt French supermarket fridge hackers

No claim of responsibility.

By Raphael Satter and Gabriel Stargardter

 
 
 
 

Featured whitepaper


 
 

MOST POPULAR


ASD’s Essential Eight replacement moves away from maturity ladder
  Security  

ASD’s Essential Eight replacement moves away from maturity ladder

By Juha Saarinen

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers
  Security  

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

By Juha Saarinen

Hackers exploit firmware flaw to heat supermarket fridges
  Security  

Hackers exploit firmware flaw to heat supermarket fridges

By Leo Marchandon and Gabriel Stargardter

ASIC's security and data chiefs to leave in December
  Training & Development  

ASIC's security and data chiefs to leave in December

By Ry Crozier

Defence quiet on Australia's role in Five Eyes AI program Arcadia
  Security  

Defence quiet on Australia's role in Five Eyes AI program Arcadia

By Juha Saarinen

 

Sponsored links


 
 
unsubscribe