Global – October 27, 2026 -- Security provider Wirespeed says reviews of new customers' previous 90 days of detections routinely uncover suspicious logins on MFA-enforced accounts that existing tools never surfaced, some dating back weeks.

The sessions go unflagged because the authentication evidence looks clean: valid credentials, a satisfied MFA prompt and a valid issued session. A stolen session token carries the authentication context that created it, so the assertion of strong authentication travels with the attacker.

Global – October 17, 2026 -- Coalition Incident Response (CIR) has documented rival Business Email Compromise (BEC) attackers using the names of inbox rules as a chat channel inside the same compromised mailbox, and says the exchanges expose gaps in default email platform security.

Texas – October 17, 2026 -- Third Wave Innovations, a Texas-based managed security service provider (MSSP), has eliminated dedicated Level 1 analyst triage from its core business after adopting Wirespeed Automated Detection and Response (ADR). The platform now filters background noise so the team receives only one or two meaningful items per week.

Global – October 17, 2026 -- Coalition says its Wirespeed platform cuts alert noise by 99.99% before any alert reaches a customer queue, replacing analyst-driven managed detection and response (MDR) with automated verdicts and containment in milliseconds.

Global – October 17, 2026 -- ConnectWise is investigating attempted unauthorized access to its Cloud Backup for Microsoft 365 service, formerly SkyKick Cloud Backup, after disclosing the incident on October 16. The company says containment measures are in place and it has no indication that partner backup data was accessed. The investigation is ongoing.