/
attack_type:credential_compromise × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · critical

ConnectWise Cloud Backup (SkyKick) credentials abused to access 162 Microsoft 365 tenants; backup service access shut off

Attackers used compromised application credentials from ConnectWise Cloud Backup (formerly SkyKick) to access Microsoft 365 customer environments. Huntress researcher Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16. ConnectWise disabled application access, which interrupted backup services, …

managed service providers technology
gbhackers.com · · 3 fontes · 3 atualizações critical

Attackers abuse stolen UpdraftCentral keys from TeamUpdraft breach to install malicious plugins on WordPress sites

Attackers used UpdraftCentral connection keys exposed in an October 17-18, 2026 breach of the TeamUpdraft website to send validly signed remote-management commands to WordPress sites running UpdraftPlus. The commands installed malicious plugins that give unauthorized access, and Wordfence also saw attempts to delete existing plugins. Team…

CVE-2026-10795 technology