The Wave

1. 2d agoThe RecordFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’The FBI issued a flash alert warning that the open-source Artex AI hacking framework is being used by cybercriminals and nation-state actors to automate intrusions at machine speed, with Amazon publishing a corroborating study the same day.

   2 articles · BleepingComputer

   1. 2d agoThe RecordEarliestFBI flash alert says Artex tool automating cyberattacks at ‘machine speed’
   2. 3h agoBleepingComputerPickupFBI warns ARTEX AI hacking tool is powering global cyberattacks

   CyberAIFBI warns hackers are using open-source AI framework ARTEX to automate attacks37 linked
2. 6h agoWiz ResearchARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogWiz Research reports an actor using ARTEX, an open-source agentic AI penetration-testing framework, to run automated reconnaissance and identity-provider attacks against IT and software vendors throughout October 2026, linked to Microsoft's Storm-0940 supply-chain activity.1 outletCyberFBI warns hackers are using open-source AI framework ARTEX to automate attacks21 linked
3. 3d agoSecurityWeek · research by HuntressHackers Deploy Malware in Fresh ScreenConnect CampaignHuntress reports an intruder abused a third-party RMM+ extension in cloud-hosted ScreenConnect partner panels to push attacker-controlled ScreenConnect clients to at least 288 computers across 48 organizations, prompting ConnectWise to disable five extensions.

   4 articles · The Register

   1. 3d agoSecurityWeekPickupHackers Deploy Malware in Fresh ScreenConnect Campaign
   2. 3d agoThe RegisterPickupHackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs
   3. 3d agoCybersecurity DivePickupConnectWise disables third-party extensions as it probes cyberattack targeting ScreenConnect users
   4. 3d agoCyberScoopEarliestRogue remote-access campaign spread through ScreenConnect add-on, researchers say

   Cyber32 linked
4. 2d agoMicrosoft Security BlogSCKit abuses ScreenConnect to deploy remote access and target technician sessionsMicrosoft Threat Intelligence details SCKit, a worm that abuses hijacked ConnectWise ScreenConnect sessions to install unauthorized clients, persist on customer endpoints, and target technician workstations and browser-held console cookies.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers6 linked
5. 3d agoThe RecordConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsConnectWise is probing ScreenConnect breaches at nearly 50 organizations, tying the activity to the abuse of a third-party RMM+ extension and disabling it across roughly 400 customer environments.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers9 linked
6. 4d agoCybersecurity DiveN-able issues hotfix after researcher dumps PoCs in disclosure spatN-able shipped a hotfix for critical flaws in its RMM platform after an independent researcher released proof-of-concept exploits in a disclosure dispute, and it briefly took the platform offline.

   2 articles

   1. 4d agoCybersecurity DiveEarliestN-able issues hotfix after researcher dumps PoCs in disclosure spat
   2. 4d agoDark ReadingPickupN-able Takes N-central Platform Offline After Discovery of 33 Flaws

   CyberN-able N-central zero-days exploited after researcher publishes exploit code24 linked
7. 5d agoCSO Online · research by Sean BalesN-able N-central gets emergency fix two days after 33 exploits publishedAfter a researcher published over 30 alleged N-central zero-days with exploit code, N-able took its hosted N-central environments offline and told on-premises customers to shut their servers down while it develops a hotfix.

   4 articles · 3 outlets · BleepingComputer, TechCrunch

   1. 6d agoBleepingComputerEarliestN-able takes cloud platform offline after 30+ "zero-days" published
   2. 5d agoTechCrunchPickupN-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
   3. 5d agoCSO OnlinePickupN-able N-central gets emergency fix two days after 33 exploits published
   4. 4d agoBleepingComputerN-able releases security hotfixes for zero-day vulnerabilities

   CyberN-able N-central zero-days exploited after researcher publishes exploit code50 linked
8. B3d agoBleepingComputerActive ScreenConnect attacks breach MSPs, impact dozens of organizationsConnectWise is investigating an active malware campaign that abuses compromised ScreenConnect environments at managed service providers to push rogue remote-access clients onto customer devices.1 outletCyberConnectWise probes ScreenConnect breaches as worm targets managed service providers6 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.