Good morning. ConnectWise plans to start restoring its Cloud Backup service today, nine days after it shut the service down because attackers had used its Microsoft 365 credential against customer tenants, so Monday starts with a tenant check before anyone reconnects. HPE fixed 72 bugs in Aruba’s wireless software, a Brotli decoder bug needs updates across Node.js and Python, and today is CISA’s federal deadline for the Nextcloud Collabora CODE flaw.
Lead Story
ConnectWise targets today to begin restoring Cloud Backup (formerly SkyKick); each Microsoft 365 tenant still needs its own review first. Run the tenant check →
Also Worth Your Attention
HPE fixed 72 AOS-8 and AOS-10 bugs in Aruba controllers and access points, eight rated 10.0. Get the upgrade list →
Don’t Miss the Policy Changes That Affect Security Decisions
Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
A Brotli decoder bug reaches Node.js, Bun, Envoy and two Python packages, each with its own fix. Check your runtimes →
CISA added the Nextcloud Collabora CODE app flaw to its exploited list, due today. Confirm the version →
Also on the radar: Palo Alto says PAN-OS and Panorama management interfaces are affected by the PHP2Shell bugs; hotfixes 10.2.18-h13, 11.1.16-h4 and 11.2.10-h16 are out and the rest are due October 27 to 30, so keep management access to trusted IPs until then (Palo Alto advisory). CISA also added the VeloCloud Orchestrator flaw we covered Friday to its exploited list (CISA).
Planning the week’s patches? Our patch priority checklist ranks what to fix first.
Source: ConnectWise Trust Center; HPE advisory HPESBNW05162; Node.js security releases; CISA KEV alert
Go Deeper
- Identity and access management: app permissions, roles and secrets
- Cybersecurity tools for asset inventory and patch tracking
Get this in your inbox every weekday morning: subscribe to the Daily Brief.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.
