/
initial_access_vector:valid_accounts × latest_source_host:huntress.com × limpar

Resultados

4 casos · pág. 1/1

huntress.com · critical

ConnectWise Cloud Backup (SkyKick) vendor credential abused to access 162+ Microsoft 365 tenants and plant persistence

Huntress reports that a stolen vendor credential for ConnectWise Cloud Backup (formerly SkyKick) was used on October 15, 2026 to obtain Microsoft Graph tokens in customer Microsoft 365 tenants from the hosting IP 144.172.64.128. As of 19:00 UTC on October 16, Huntress had confirmed unauthorized sign-ins in 162 tenants. Later updates found…

huntress.com · low

Huntress outlines 2026 threat priorities: RMM abuse up 277%, ClickFix, AI-enabled cybercrime, multi-extortion ransomware and BEC

A Huntress thought-leadership post sets out five priorities for security leaders in 2026: abuse of trusted IT tools, AI-enabled cybercrime, social engineering, multi-extortion ransomware and identity-based attacks including BEC. The article cites internal Huntress telemetry showing RMM abuse rising roughly 277% year over year, with Screen…

huntress.com · low

Huntress outlines 10 endpoint security trends for 2027: AI agents, ransomware extortion, identity-first security, LotL and supply chain risk

A Huntress vendor blog post lists 10 endpoint security trends. It reports no specific incident, vulnerability or campaign. The themes are agentic AI and the hijacking of non-human identities, ransomware shifting to double and triple extortion, incident response (IR) readiness, EDR-to-XDR consolidation, identity-first security and zero tru…