/
data_types_exposed:directory_data × victim_sectors:trade × limpar

Resultados

2 casos · pág. 1/1

securityaffairs.com · high

Stolen ConnectWise Cloud Backup app credentials used to access Microsoft 365 tenants; services suspended

ConnectWise suspended its Cloud Backup (formerly SkyKick) service and took SaaS Security and Cloud Management offline after unknown attackers obtained unauthorized access to seven of its application identities. The company detected the incident on October 14, disabled the compromised identities on October 17, and is still investigating ho…

managed service providers policy
huntress.com · critical

ConnectWise Cloud Backup (SkyKick) vendor credential abused to access 162+ Microsoft 365 tenants and plant persistence

Huntress reports that a stolen vendor credential for ConnectWise Cloud Backup (formerly SkyKick) was used on October 15, 2026 to obtain Microsoft Graph tokens in customer Microsoft 365 tenants from the hosting IP 144.172.64.128. As of 19:00 UTC on October 16, Huntress had confirmed unauthorized sign-ins in 162 tenants. Later updates found…

managed service providers legal