/
data_types_exposed:teams_chats × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · critical

ConnectWise Cloud Backup (SkyKick) supply-chain attack abuses service principals to breach Microsoft 365 tenants

ConnectWise shut down its Cloud Backup service (formerly SkyKick Cloud Backup) after an attacker gained unauthorized access to application identities and used them to compromise Microsoft 365 tenants. Huntress identified at least 162 compromised tenants in its environment, and Microsoft Threat Intelligence characterized the incident as an…

managed service providers technology
thehackernews.com · critical

Compromised ConnectWise Cloud Backup (SkyKick) OAuth app credential used to access 173+ Microsoft 365 tenants

An active supply chain attack is abusing a compromised credential for the ConnectWise Cloud Backup (formerly SkyKick) Microsoft 365 OAuth application, giving unknown actors access to customer tenants. Huntress confirmed unauthorized sign-ins in 173 partner/customer tenants, and Microsoft reports broad successful service principal authenti…

UNC7017 managed service providers legal