The Watch

N-able Passportal's browser extension returned live vault access and refresh tokens to any website or embedded iframe, per SANS NewsBites. Because Passportal is MSP-concentrated, one extension bug becomes an event across every tenant an affected provider manages.

A joint team from MATS Research, ELLIS Institute Tubingen and the Max Planck Institute showed that the encrypted reasoning blocks Anthropic, OpenAI and Google return to API clients can be replayed into a cheaper model in the same family, which then prints the hidden chain-of-thought in plaintext. Plaintext secret scanning finds none of it, because the secret sits inside an envelope no scanner decrypts.

CISA added an actively exploited Oracle HTTP Server / WebLogic flaw to the KEV catalog, against a fix that shipped in January 2026. The Hacker News and Risky.Biz both report a SharePoint chain moving from public proof-of-concept to in-the-wild exploitation inside a week. And the Mirage2FA phishing-as-a-service kit is defeating Microsoft 365 two-factor by abusing legitimate login flows.

CloudSEK documented BRIDGEHEAD, a cluster of 40 typosquatted npm packages that pivots into Windows Subsystem for Linux to run a Rust infostealer where most Windows endpoint agents collect no telemetry, per Risky.Biz. A separate ClickFix campaign uses 24 npm packages that are individually harmless on install, serving lures from the unpkg CDN your proxy already allowlists. Step Security counts 56 supply chain attacks since August 2025, 50 of them in 2026, most spread by self-replicating worms rather than single malicious releases.

Roughly $5.35B of observability M&A closed in about 90 days: Palo Alto Networks bought Chronosphere for $3.35B, Snowflake took Observe for $1B, Dynatrace paid $915M for Arize AI and Elastic acquired Deductive AI for $85M. Several telemetry vendors now sit under new parents, new roadmaps and new subprocessor chains, and in the Palo Alto case enforcement and visibility land inside one vendor's blast radius. The layer that routes security logs before your SIEM sees them can also drop them, using supported product features and leaving no alert behind.