The New York Times. . While the tools and technology reporters use for their work have evolved, the fundamentals of reporting on grief, loss and tragedy have remained the same. Our Metro editor, Nikita Stewart, shares the evolution of our reporting. - Facebook

Shifting client and auditor expectations for SOC reporting Service organizations now face a shifting threat landscape. The assumption that an organization’s software is reasonably secure because it has traditional SOC reports and no major incidents have occurred may no longer be adequate as clients and regulators may question whether hidden vulnerabilities likely exist in the environment. Boards and audit committees are pressing organizational leaders for answers on how their service providers address AI’s ability to swiftly detect and exploit overlooked weaknesses.

Here’s your NYT Strands hint for today, plus the spangram and all of today’s Strands answers for puzzle No. 959 on Sunday, Oct. 18, 2026. Today’s Strands theme was tricky. It helps to be a runner. Read on for all the answers.

A supply-chain attack involving ConnectWise’s cloud services has exposed Microsoft 365 customers to unauthorized application access, with researchers reporting successful sign-ins across 173 partner and customer tenants. The incident centres on credentials associated with ConnectWise Cloud Backup, formerly SkyKick, and raises concerns about attackers exploiting permissions already entrusted to business software. ConnectWise has confirmed unauthorized access to application identities within its Cloud Backup environment. In an October 17 update on its service-status page, the company said it was shutting off application access, interrupting customer backups while investigation and remediation continued.