/
attack_type:cloud_account_compromise × limpar

Resultados

2 casos · pág. 1/1

cyberscoop.com · critical

ConnectWise Cloud Backup supply-chain attack: compromised API secret used against hundreds of Microsoft 365 tenants

A threat actor obtained a highly sensitive API secret for ConnectWise Cloud Backup (formerly SkyKick) and used it to sign in to customers' Microsoft 365 tenants, forcing ConnectWise to suspend its Cloud Backup, SaaS Security and Cloud Management services. Huntress saw sign-in activity from the malicious infrastructure across almost 1,000 …

managed_services small_and_medium_business
gbhackers.com · critical

ConnectWise Cloud Backup (SkyKick) credentials abused to access 162 Microsoft 365 tenants; backup service access shut off

Attackers used compromised application credentials from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer environments. Huntress researcher Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16. ConnectWise disabled application access, which interrupted backup services, …

managed service providers technology