/
attack_type:account_takeover × latest_source_host:huntress.com × limpar

Resultados

3 casos · pág. 1/1

huntress.com · low

Huntress launches ITDR Lookback to find pre-onboarding Microsoft 365 compromises, citing three active intrusions in early testing

Huntress announced general availability of the Managed ITDR Lookback feature. It reviews up to 180 days of Microsoft 365 login history for newly onboarded tenants, looking for compromises that predate monitoring. Active compromises trigger a critical Incident Report, SOC investigation and session revocation. Previously remediated ones are…

huntress.com · critical

ConnectWise Cloud Backup (SkyKick) vendor credential abused to access 162+ Microsoft 365 tenants and plant persistence

Huntress reports that a stolen vendor credential for ConnectWise Cloud Backup (formerly SkyKick) was used on October 15, 2026 to obtain Microsoft Graph tokens in customer Microsoft 365 tenants from the hosting IP 144.172.64.128. As of 19:00 UTC on October 16, Huntress had confirmed unauthorized sign-ins in 162 tenants. Later updates found…

huntress.com · medium

Business email compromise (BEC): tactics, warning signs and defensive guidance, with $55B in reported global losses

Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…