Security Brief — October 20, 2026

Breaches

• ConnectWise Cloud Backup Supply-Chain Attack — Attackers used compromised ConnectWise application identities to gain unauthorized access to over 160 Microsoft 365 tenants.
• Merit Financial Group Ransomware Attack — The Storm ransomware group claimed responsibility for an attack on Merit Financial Group on October 19, 2026.
• Fisher59 Beverage Distributor Breach — The Anubis ransomware group listed beverage distributor Fisher59 as a victim on their leak site as of October 20, 2026.

AI Attacks

• AI-Driven Impersonation Risks — Security researchers continue to warn of the escalating threat posed by AI-generated voice and communication impersonation in corporate environments.

Dark Web

• Ransomware Leak Site Activity — Sustained activity from extortion groups continues, with multiple new victim claims appearing on leak sites over the last 48 hours.