Cloud Backdoors, Supply Chain Attacks, and Infrastructure Disruptions

It has been a heavy week across cybersecurity and enterprise IT. From backdoored developer tools and compromised SaaS platforms to global retail and banking disruptions, here is a breakdown of the key incidents security teams and IT leaders need on their radar:

Cloud & Identity Exploitation

ConnectWise Suspends Cloud Backup Service:

ConnectWise disabled its Cloud Backup service after threat actors gained unauthorized access to application identities, leading to compromised Microsoft 365 tenant environments.

Retail & Enterprise Outages

Ahold Delhaize Cyberattack:

Global grocery giant Ahold Delhaize confirmed a cyberattack that disrupted store operations and pulled brand websites and mobile apps offline across both the US and Europe.

Bullhorn Staffing Platform Outage:

Staffing software provider Bullhorn took its entire platform offline to contain an ongoing cyberattack, triggering widespread service disruptions.

Revolut Banking Disruption:

Fintech leader Revolut worked to restore operations after a massive worldwide outage impacted the majority of its online banking services.

Supply Chain & Developer Targets

OVHcloud CLI Backdoored:

European cloud giant OVHcloud warned users that attackers compromised its open-source GitHub CLI tool repository to distribute information-stealing malware.

Siemens Software Center Exploited:

Threat actors paired genuine, digitally signed Siemens Software Center binaries with malicious DLLs in a ClickFix social engineering lure to infect Windows endpoints.

WordPress Plugin Supply Chain Hit:

Downloads of the Rank Math PRO plugin served directly from the official website were found carrying malware that planted hidden backdoors.

Data Breaches

Nikkei Data Breach:

Japanese media giant Nikkei disclosed its third breach in under a month, exposing 1.83 million personal information records.

Executive Takeaways for Security & IT Leaders:

Audit SaaS Application Identities:

Non-human identities, OAuth tokens, and app permissions are high-value targets. Tighten app governance and enforce strict zero-trust access controls across M365 and SaaS ecosystems.

Re-evaluate Software Supply Chain Controls:

Code signing is no longer a bulletproof guarantee of safety. Ensure strict endpoint monitoring for DLL side-loading and verify download hashes across third-party tools and open-source CLI utilities.

Review Third-Party Dependency Risks:

Outages across critical operational platforms (CRM, cloud backup, fintech) highlight the necessity of tested business continuity plans when key vendor services go dark.

Which of these incidents poses the biggest operational risk to your stack?

#Cybersecurity #InfoSec #ThreatIntelligence #CloudSecurity #SupplyChain #ITOps #CISO #RiskManagement