/
criticity:critical × latest_source_host:cyberscoop.com × limpar

Resultados

2 casos · pág. 1/1

cyberscoop.com · critical

ConnectWise Cloud Backup supply-chain attack: compromised API secret used against hundreds of Microsoft 365 tenants

A threat actor obtained a highly sensitive API secret for ConnectWise Cloud Backup (formerly SkyKick) and used it to sign in to customers' Microsoft 365 tenants, forcing ConnectWise to suspend its Cloud Backup, SaaS Security and Cloud Management services. Huntress saw sign-in activity from the malicious infrastructure across almost 1,000 …

managed_services small_and_medium_business
cyberscoop.com · · 2 fontes · 2 atualizações critical

China-nexus Armory Castle exploited BeyondTrust Remote Support zero-day CVE-2026-102764 from late August

Mandiant and GTIG attribute exploitation of the critical BeyondTrust Remote Support zero-day CVE-2026-102764 to Armory Castle (formerly tracked as UNC5221), a likely Chinese government-backed espionage group. BeyondTrust dates the first known exploitation to Aug. 29 and says it detected and contained the activity Sept. 28. Only a small nu…

CVE-2026-102764 Armory Castle UNC5221 legal services saas