/
attack_type:supply_chain × latest_source_host:securityweek.com × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

securityweek.com · critical

ConnectWise suspends cloud services after compromised Cloud Backup credential used to access hundreds of Microsoft 365 tenants

ConnectWise suspended its Cloud Backup (formerly SkyKick), SaaS Security and Cloud Management services on October 17-18 after attackers abused a compromised application credential to access customers' Microsoft 365 tenants. Huntress saw the Cloud Backup identity sign in to 162 M365 tenants between October 15 and 16. By October 17 it had f…

securityweek.com · · 4 fontes · 4 atualizações high

OVHcloud CLI v0.11.0–v0.15.0 release assets swapped with secret-stealing binary via hijacked GitHub contributor account

On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …