Tech Watch

Every week, one piece of news in cybersecurity, DevOps or networking, sometimes web development, verified and sourced, with three questions: what happened, why it matters, and what to take away from it in practice.

2026

Two attacks, one shared habit: wipe the logs

20 October 2026·334 words·2 mins

Ivanti Connect Secure and BeyondTrust Remote Support: two flaws, two attackers, and in both cases logs wiped or altered on the compromised device. Logs that stay on the box prove nothing anymore.

Routers and ISP boxes: a Wi-Fi flaw some models will never fix

20 October 2026·327 words·2 mins

A flaw in Broadcom’s old WPS module affects routers and ISP boxes from many brands. It can be exploited within radio range, without the Wi-Fi password. No CVE, and no fix for some older models.

An app "for testing" opened up Nextcloud servers

20 October 2026·332 words·2 mins

A Nextcloud app described as meant for testing let anyone run commands on the server without logging in. Attackers planted web shells, and disabling the app wasn’t enough.

A backup app opened up 162 Microsoft 365 tenants

20 October 2026·378 words·2 mins

The attackers didn’t hack a single account: they signed in as ConnectWise’s backup app, already trusted by its customers. User MFA never came into play.

543,699 GitHub secrets still work. Nobody revoked them.

11 October 2026·366 words·2 mins

Out of 1.1 million credentials exposed on public GitHub repositories, 543,699 still worked in July 2026. The problem isn’t the leak, it’s the missing revocation.

↑