{"type":"rich","version":"1.0","provider_name":"Transistor","provider_url":"https://transistor.fm","author_name":"Talkin' Bout [Infosec] News","title":"ConnectWise SkyKick Compromise Causes Panic in MSP Space - 2026-10-19","html":"<iframe width=\"100%\" height=\"180\" frameborder=\"no\" scrolling=\"no\" seamless src=\"https://share.transistor.fm/e/f7645f2b\"></iframe>","width":"100%","height":180,"duration":4195,"description":"The BHIS crew examines the ConnectWise/SkyKick compromise, its implications for Microsoft Entra tenants, and the consequences for MSPs and their customers. They discuss privileged application access, attacker persistence, and why clear incident communication matters. Other stories include the Cairn framework’s use of AI agents against retail websites, research into prompt injection in HTTP headers, exposed MCP servers, Citizen Lab’s reporting on advertising-delivered zero-click spyware, and an alleged listening device installation at OpenAI. Along the way, the team explores deception, proactive security assessments, and reducing attack surface as automated attacks become cheaper and easier to scale.\nJoin us LIVE on Mondays, 4:30pm ET.\nA weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.\nhttps://www.youtube.com/@BlackHillsInformationSecurity\nChat with us on Discord! -\nhttps://discord.gg/bhis\n🔴live-chat\nChapters\nLinks\nConnectWise/SkyKick Compromise and Microsoft Entra Tenant Access\nCairn: AI Agents Automating Attacks Against Retail Websites\nResearch: Prompt Injection in HTTP Response Headers\nExposed MCP Servers and the Risk of AI Inference Theft\nAdfection: Zero-Click Spyware Delivered Through Advertisements\nAlleged Listening Device Installation at OpenAI\nAntisyphon Pay What You Can Training: November 10–11\nDeathCon Tickets in San Diego\n\n\n🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits \nhttps://poweredbybhis.com\n\nBrought to you by:\nBlack Hills Information Security \nhttps://www.blackhillsinfosec.com\n\n☯️ Introducing BHIS Fusion Penetration Testing\nhttps://www.blackhillsinfosec.com/fusion-penetration-testing/\nAntisyphon Training\nhttps://www.antisyphontraining.com/\n\nActive Countermeasures\nhttps://www.activecountermeasures.com\n\nWild West Hackin Fest\nhttps://wildwesthackinfest.com","thumbnail_url":"https://img.transistorcdn.com/WPYM9pq_SRUcywHv9tdgpsGLyLx04W2rDmzktvAcD4Y/rs:fill:0:0:1/w:400/h:400/q:60/mb:500000/aHR0cHM6Ly9pbWct/dXBsb2FkLXByb2R1/Y3Rpb24udHJhbnNp/c3Rvci5mbS8xZTA1/ZWZhNDcxZGM4ZTFj/ZGJhMTMwNmYzMmJj/ZjBkNi5wbmc.webp","thumbnail_width":300,"thumbnail_height":300}