Episode 4: ConnectWise breach widens and OpenCode AI key theft, 19 October 2026
The ConnectWise Cloud Backup (formerly SkyKick) incident widened over the weekend: Huntress now sees attacker sign-in activity in almost 1,000 Microsoft Entra tenants, more than 300 of them successful, plus a failed targeted wave against policy, national security, trade and critical minerals organisations. OpenCode disclosed a breach that exposed AI provider keys saved by 1.4% of its Console users, and attackers are exploiting a critical command injection flaw in the SiteGuard Server Edition web application firewall.
Reporting window: 24 hours to 7:00 am AEDT, Monday 19 October 2026, with a recap of the weekend editions. Open sources only.
Weekend recap
Saturday, Episode 2: BeyondTrust Remote Support zero-day added to CISA KEV; Fortinet PEERSTITCH implant; Citizen Lab on spyware delivered through ads. Episode 2 notes
Sunday, Episode 3: ConnectWise Cloud Backup credential abuse; Drupal critical RCE patches; Napoleon Perdis data exposure; LockBit claim against Poole Group. Episode 3 notes
Headlines
ConnectWise Cloud Backup (SkyKick) incident widens: Huntress reports almost 1,000 Entra tenants with sign-ins from the attacker address (over 300 successful), a failed second wave against 16 tenants in policy, national security, trade and critical minerals, and password spraying of four law firms on 13 to 14 October. ConnectWise disabled seven app identities on 17 October (07:00 UTC) and suspended Cloud Backup, SaaS Security and Cloud Management; existing tokens may stay valid until expiry and planted secrets (one set expiring 2028) persist. No attribution. Huntress, ConnectWise advisory, The Hacker News
OpenCode Console breach exposes AI provider keys: keys for OpenAI, Anthropic, Google and others saved by 1.4% of Console users; legacy system being retired; users report unexplained charges (unverified). The Latent, Cyera
SiteGuard Server Edition WAF exploited (CVE-2026-106931): OS command injection in the default-on statistics feature gives root or SYSTEM; confirmed by the vendor and JPCERT/CC. BleepingComputer
Australian focus
ConnectWise clean-up for Australian MSPs: the toolset is common among local managed service providers; no Australian organisation publicly named; critical minerals among the sectors targeted in the second wave. iTnews
Hunter Neurology investigating n0n ransomware claim (from 15 October): the group claims more than 15,000 patient images and scans, about 11,800 letters and reports and records backups; the NSW practice links the claim to a third-party hosting provider and says services are normal. Claim unverified. Cyber Daily
n0n leak-site tempo: 7 of 15 listings recorded on 18 October (operator claims). Ransomnews
Global threat activity
SiteGuard Server Edition: fixed in 8.00 Update 5 (7.00 Update 6 on FreeBSD), with a patch for older and end-of-life builds; download the diagnostic information first, as remediation may erase traces. BleepingComputer
Ahold Delhaize recovery: Albert Heijn website and app restored on 18 October, deliveries from Friday; some US banners still offline; no indication of data theft per the company. NL Times, PennLive
Save-On-Foods More Rewards breach (Canada): names and, where provided, addresses, phone numbers, emails and dates of birth accessed; detected 13 October; no card data or passwords. CBC News
Oracle Health (legacy Cerner) breach scale: Texas Attorney General filing lists 2,992,244 Texans; reported national total about 19.9 million, not confirmed by Oracle. Fox News
AI security
OpenCode Console provider key exposure: revoke and reissue linked keys in each provider's dashboard, review usage from 16 October and set spend limits. The Latent, Cyera
Aoki infostealer targets AI coding assistant credentials (15 October): Claude, Codex, Cursor, Gemini, Copilot, JetBrains AI and Kiro files and tokens. Symantec, Infosecurity Magazine
Filesystem capability laundering in MCP servers (preprint): 787 of 4,806 triaged servers flagged, 150 confirmed leaks, two CVEs in Anthropic's Git MCP server. arXiv
Industry and strategic
US cybersecurity job postings at four-year low: 235,786 postings January to September, down 26.4%; AI security engineer demand up 268.3%. SecurityWeek
Cellebrite LOKI boot ROM exploit (lead only): reportedly shown at Hexacon, affecting Apple chips from iPod touch 2 to iPhone 11; unpatchable but needs physical access; no write-up published.
Outlook and patch priorities
Critical: ConnectWise Cloud Backup and Cloud Management apps (disable, audit service principal sign-ins from 15 October and app credentials added since 13 October); SiteGuard Server Edition; BeyondTrust Remote Support (CVE-2026-102764) and Fortinet (CVE-2025-61624), CISA KEV due 19 October. CISA KEV
High (72 hours): OpenCode Console provider keys; Drupal core and Entity List; Adobe Commerce and Magento.
Watch: further ConnectWise victims and indicators (next ConnectWise update due 01:00 UTC 19 October, 12:00 pm AEDT); n0n publications; LockBit deadline for Poole Group on 25 October.
Indicators
Attacker address (Huntress): 144.172.64[.]128. Additional addresses are listed in the ConnectWise advisory.
Disabled ConnectWise app IDs: Cloud Backup 506e08f9-6e9a-4da4-942b-a099a03644ae; Cloud Management 2399d300-6fca-4e6a-a686-399fefe75b83; MS Teams 24205314-2b89-4e07-a2a4-579e898a5640; Exchange Online b78f6a77-d4e5-46fb-87e5-d1648bd02519; MS Graph 0de14c77-b9b0-4137-9360-34878a929827; Partner Center 412dcf96-176d-4b3a-a1b0-4981ad66971e; SharePoint Online b2b55f5b-7758-4719-8d8f-88ae172e6bdb.
