Hackers Hit French Supermarket Fridges, LiteLLM Malware Steals API Keys, 162 M365 Tenants Breached

An attacker abused ConnectWise credentials to access 162 Microsoft 365 tenants, and in one tenant a ConnectWise cloud app added itself to the Global Administrator role. BeyondTrust Remote Support 2.6.2.3 and earlier has a flaw that lets an unauthenticated attacker write files and run code. LiteLLM version 1.107.0 spread credential-stealing malware, and tens of thousands of users lost their API keys. DebugBear code drained 710 Polymarket wallets of $2.7 million in a supply chain attack. A TeamViewer flaw, rated CVSS 8.8, lets a compromised machine hijack the support technician's computer the moment a session opens. And French supermarket refrigeration controllers were compromised overnight, forcing staff to clear damaged stock.

The hot sheet: https://blog.thehotdrop.live/blog/the-hot-drop-for-11-02-2026

0:00 ConnectWise access reaches 162 Microsoft 365 tenants
2:07 BeyondTrust flaw enables unauthenticated code execution
3:13 LiteLLM supply-chain malware steals API credentials
4:08 DebugBear code linked to Polymarket wallet theft
4:47 TeamViewer session flaw threatens support technicians
5:41 Compromised refrigeration controllers affect French stores

#Cybersecurity #ConnectWise #Microsoft365 #SupplyChain #TeamViewer