https://cedricvrvrd.github.io/tech-watch/Recent content in Tech Watch on Heading NorthHugo -- gohugo.ioen© 2026 Cédric VERVOORDTue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/connectwise-cloud-backup/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/connectwise-cloud-backup/The attackers didn’t hack a single account: they signed in as ConnectWise’s backup app, already trusted by its customers. User MFA never came into play.https://cedricvrvrd.github.io/tech-watch/nextcloud-built-in-code/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/nextcloud-built-in-code/A Nextcloud app described as meant for testing let anyone run commands on the server without logging in. Attackers planted web shells, and disabling the app wasn’t enough.https://cedricvrvrd.github.io/tech-watch/broadcom-wps/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/broadcom-wps/A flaw in Broadcom’s old WPS module affects routers and ISP boxes from many brands. It can be exploited within radio range, without the Wi-Fi password. No CVE, and no fix for some older models.https://cedricvrvrd.github.io/tech-watch/wiped-appliance-logs/Tue, 20 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/wiped-appliance-logs/Ivanti Connect Secure and BeyondTrust Remote Support: two flaws, two attackers, and in both cases logs wiped or altered on the compromised device. Logs that stay on the box prove nothing anymore.https://cedricvrvrd.github.io/tech-watch/github-secrets-not-revoked/Sun, 11 Oct 2026 00:00:00 +0000https://cedricvrvrd.github.io/tech-watch/github-secrets-not-revoked/Out of 1.1 million credentials exposed on public GitHub repositories, 543,699 still worked in July 2026. The problem isn’t the leak, it’s the missing revocation.