Weekly Tech Digest | 19 Oct 2026

Weekly Tech Digest – 19-10-2026


Cybersecurity continues to be a pressing concern as vulnerabilities and breaches emerge across various platforms. This week, we delve into critical issues affecting both consumer and enterprise technologies, highlighting the need for vigilance and proactive measures.

The following articles shed light on recent developments that could impact users and organisations alike.

Wi-Fi Vulnerability in Broadcom Routers

A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16.

  • Wi-Fi Vulnerability in Broadcom Routers

    A flaw in Broadcom’s Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16.

OpenCode Console Security Breach

An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.

  • OpenCode Console Security Breach

    An intruder reached a legacy system at OpenCode on the night of October 16 and may have exposed the third-party AI provider keys that users had saved in OpenCode Console, the company said.

Detection of Orphaned VBA Projects in DWG Files

Here is the YARA rule I used to detect ‘Orphaned VBA Projects Inside DWG Files’.

ConnectWise Suspends Cloud Backup Services

ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.

  • ConnectWise Suspends Cloud Backup Services

    ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.

As these stories highlight, the tech landscape remains fraught with challenges. Your thoughts and experiences on these matters are welcome in the comments below.

Related posts

Vault | v2.2.1

Vault v2 2 1: maintenance patch with regression fixes, stability and correctness improvements, upgrade guidance, verify downloads and report regressions

authentik | version/2026.8.5

authentik v2026 8 5: fixes MultipleObjectsReturned endpoints, skips existing Microsoft Entra group members, updates certificate deps for emudhra, UI bug fixes

Caddy | v2.11.7

Caddy v2 11 7: fixes idle timeout regressions, HTTP2 proxy crash and cut streams, adds RFC10036 Incremental for streaming, reliability, placeholders restored