Don't Get Hacked: Why Your M365 & Oracle Systems Are At Risk Right Now

Storm-0940 used compromised ConnectWise credentials to attempt sign-ins against more than 2,250 Microsoft 365 tenants, with more than 300 of those sign-ins appearing to succeed. Capcom confirms a breach of 11.7 million Capcom ID records. Volt Typhoon is linked to a CVSS 10 Cisco Catalyst SD-WAN zero-day exploited since 2023. An Anthropic model turned zero-days into working exploits, including a 9.8 zero-click Linux kernel root exploit. Cl0p targets Oracle E-Business Suite with a new CVSS 10 flaw as proof-of-concept exploits circulate. And a third ShinyHunters arrest charges a Canadian ransomware negotiator and former cybersecurity executive.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-10-29-2026

0:00 Storm-0940 Breaches M365 via ConnectWise Creds
2:21 Capcom Breach Exposes 11.7M Records
4:09 Volt Typhoon Tied to Cisco SD-WAN Zero-Day
4:57 Anthropic Model Builds Exploit Chains
5:38 Cl0p Targets Oracle EBS With CVSS 10 Flaw
6:12 Third ShinyHunters Arrest

#Cybersecurity #Microsoft365 #VoltTyphoon #Ransomware #ZeroDay