/
ttps_attack:T1110.003 × latest_source_host:thehackernews.com × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

ConnectWise Cloud Backup Application Identities Compromised, Backdoored Entra Apps Seen in Microsoft 365 Tenants

ConnectWise said it is still responding to a security incident involving unauthorized access to application identities tied to Cloud Backup. The incident was identified on October 14, 2026, and mitigations began rolling out on October 17. The company has disabled the affected application connections, suspended Cloud Backup, and suspended …

thehackernews.com · critical

Compromised ConnectWise Cloud Backup (SkyKick) OAuth app credential used to access 173+ Microsoft 365 tenants

An active supply chain attack is abusing a compromised credential for the ConnectWise Cloud Backup (formerly SkyKick) Microsoft 365 OAuth application, giving unknown actors access to customer tenants. Huntress confirmed unauthorized sign-ins in 173 partner/customer tenants, and Microsoft reports broad successful service principal authenti…