/
attack_type:credential_abuse × criticity:critical × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · critical

ConnectWise suspends cloud services after compromised Cloud Backup credential used to access hundreds of Microsoft 365 tenants

ConnectWise suspended its Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management services on October 17-18 after attackers abused a compromised application credential to access customers' Microsoft 365 tenants. Huntress saw the Cloud Backup identity sign in to 162 M365 tenants between October 15 and 16. By October 17 it had f…

managed_service_providers legal
huntress.com · critical

ConnectWise Cloud Backup (SkyKick) vendor credential abused to access 162+ Microsoft 365 tenants and plant persistence

Huntress reports that a stolen vendor credential for ConnectWise Cloud Backup (formerly SkyKick) was used on October 15, 2026 to obtain Microsoft Graph tokens in customer Microsoft 365 tenants from the hosting IP 144.172.64.128. As of 19:00 UTC on October 16, Huntress had confirmed unauthorized sign-ins in 162 tenants. Later updates found…

managed service providers legal