Tech News Briefing — Saturday, October 17, 2026

The stories IT students and working techs are talking about today — a supply-chain attack that walked past MFA into 162 Microsoft 365 tenants, two critical Drupal flaws with unauthenticated exploit paths, new additions to CISA's must-patch list, and AWS changes that directly affect which exam version you should study for. Each story includes why it matters for your certification studies. Every claim in this briefing was fact-checked before publication.

Published October 17, 2026 · CertCrack daily briefing · Live headlines feed

1. ConnectWise supply-chain attack breaches 162 Microsoft 365 tenants

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after attackers compromised the service's application credentials and used them to get into Microsoft 365 customer tenants. Security firm Huntress identified at least 162 compromised tenants in the environments it monitors, and Microsoft confirmed it saw malicious authentication attempts from a single IP address starting October 15. The detail that matters: the attacker authenticated as the backup application itself, not as any user — so user protections like multi-factor authentication never came into play, while the app's broad customer-granted permissions could expose mail, OneDrive and SharePoint files, and Teams chats. ConnectWise says it has no indication that stored backup archives were compromised, and the investigation is ongoing.

Why it matters for your studies: this is the supply-chain and third-party risk scenario Security+ tests for — your security is only as strong as your vendors'. It is also a perfect identity lesson: the attacker abused a service principal (an application identity), not a password. Review vendor risk management and OAuth/app permissions.

Source: BleepingComputer · Huntress analysis, Microsoft confirmation, October 17, 2026

2. Drupal patches two critical remote code execution flaws

Drupal released emergency security updates for two critical remote code execution vulnerabilities: CVE-2026-108097 in the core Field UI module and CVE-2026-108099 in the contributed Entity List module. The flaws are not directly exploitable through the affected modules alone, but real-world sites combine core with contributed modules and custom code — and at least one known exploit path requires no authentication at all. Fixed versions are Drupal 10.6.19, 11.3.19, and 11.4.10 (plus Entity List 3.0.10); older branches are end-of-life and get no fix. Drupal warns exploits could emerge within hours or days of disclosure, and advises sites that cannot patch immediately to uninstall the Field UI module as a stopgap.

Why it matters for your studies: patch management and change control are core A+ Core 2 objectives, and vulnerability response is pure Security+. Note the exam-ready detail: uninstalling the vulnerable component when you cannot patch is a compensating control — exactly the kind of term exams love.

Source: Drupal.org security advisory SA-CORE-2026-014 · October 14, 2026

3. CISA adds Fortinet and BeyondTrust flaws to its must-patch catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerabilities in Fortinet products and BeyondTrust Remote Support to its Known Exploited Vulnerabilities (KEV) catalog on October 17. This is the third KEV expansion this week alone, after the Palo Alto PAN-OS zero-day (CVE-2026-0322) and the actively exploited Windows Shell flaw (CVE-2026-96951) covered in yesterday's briefing. KEV entries come with binding remediation deadlines for U.S. federal agencies — and they signal to every defender which flaws attackers are using right now.

Why it matters for your studies: the KEV catalog keeps showing up in real incidents because it is the closest thing security has to a mandatory patch list. Security+ expects you to know vulnerability management workflows — scanning, prioritizing, remediating — and the KEV is the most concrete prioritization input you will meet in practice.

Source: SecurityAffairs via Cybernoz · October 17, 2026

4. AWS exam transitions: check your exam code before you study

AWS is rotating two Associate/Professional exams. The Developer Associate moves from DVA-C02 to DVA-C03: registration for the new version opens October 27, and November 30 is the last day to take DVA-C02. The Solutions Architect Professional moves from SAP-C02 to SAP-C03: SAP-C02 testing ends November 16, with SAP-C03 generally available November 17. The Machine Learning Engineer Associate's MLA-C02 version is already in beta. AWS's own pages confirm the dates, and the new Developer version adds AI-assisted development and AI security content.

Why it matters for your studies: always verify the active exam code before buying materials or committing to a study plan — during transitions, old and new versions overlap for weeks. If you are mid-prep for DVA-C02 or SAP-C02, finishing before the cutoff saves you from restudying new objectives.

Source: AWS Certified Developer – Associate page · ExamSnap transition guide

5. AWS reshuffles Support plans — and your CLF-C02 flashcards are now wrong

AWS has restructured its Support plans. The current lineup is Basic (free), Business Support+ ($29/month with 24×7 access to Cloud Support Engineers and 30-minute response on critical cases), Enterprise ($5,000 minimum, down from $15,000), and Unified Operations above that. Developer Support, classic Business Support, and Enterprise On-Ramp will all be discontinued on January 1, 2027. Support plans sit in the Billing and Pricing domain of the CLF-C02 exam — and most older question banks and flashcards still list the retired plans and old prices.

Why it matters for your studies: if your study material still says “Developer Support costs $29/month,” it is now wrong, and that is exactly the kind of outdated fact exams punish. When objectives touch fast-moving topics like pricing, check the current docs instead of memorizing old dumps.

Source: DEV Community analysis of current AWS docs · October 2026

Studying for one of these certs?

Full practice banks with detailed explanations — 865 questions for AWS CLF-C02 and AIF-C01, plus CCNA, AZ-900, A+ and Network+.

Browse Practice Exams