When Security Tools Become the Attack Path
A cloud-backup incident exposes a bigger problem: the tools trusted to protect, administer, and restore a business need independent controls of their own.
Microsoft Entra ID
Cloud Backup Attack Disrupts Recovery, Plus 2 Stories
ConnectWise suspends Cloud Backup after attackers enter Microsoft 365 tenants. Plus the truth about AI pricing and Meta’s disputed website terms.
220M Travel Records Exposed, Plus 4 Tech Stories
An exposed Vietnam-linked APIS database held 220.8 million passenger and crew records. Plus active MikroTik attacks, Microsoft 365 phishing that steals sessions after MFA, a 1.08-million-person Mathspace breach, and Australia’s plan to let users switch off algorithmic feeds.
Amazon’s Ad Auctions Face a Lawsuit, Plus 4 Tech Stories
The FTC and 22 states accuse Amazon of secretly inflating ad-auction prices. Also: Microsoft starts its Entra passkey rollout, ChatGPT enters the EU’s strictest DSA tier, the House passes new limits on secret cloud-data searches, and Shopify changes how inventory reports count stock.
Car Screens Can Join a Botnet, Plus 4 Tech Stories
Android car head units are being recruited into a proxy botnet, federal agencies warn about AI-assisted attacks on industrial controllers, OpenAI wants stronger California AI safeguards, Google gives publishers a new reader-retention tool, and Microsoft corrected yesterday’s Entra ID exploitation status.
Update Elementor Pro, Plus 2 Tech Stories
Elementor Pro has a critical file-upload flaw worth patching now, Microsoft disclosed a severity-10 Entra ID bug it already fixed, and TikTok agreed to a $400 million children’s privacy settlement. Updated August 23 after Microsoft corrected the Entra flaw’s exploitation status.