Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent credentials. Microsoft attributed the campaign to Storm-0940, a China-state-aligned threat actor using ARTEX, an open-source agentic AI framework, to accelerate downstream attacks against more... Weiterlesen: Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Drive…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks
Hackers abused compromised ConnectWise Cloud Backup application credentials to access Microsoft 365 environments, escalate privileges, and plant persistent…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Diese Meldung in anderen Quellen
Verwandte Story-Cluster & Quellen (Vektor-KI)
13 Quellen
GitHub Release: microsoft/PowerToys v0.102.2993 (27.10.2026)
12 weitere Quellen
GGitHubvor 3 Std.GitHub Release: google-ai-edge/LiteRT-LM v0.19.0-nightly.20261026 (27.10.2026) GGitHubvor 4 Std.GitHub Release: openai/codex vrust-v0.165.0-alpha.1.2 (27.10.2026) GGitHubvor 9 Std.GitHub Release: openclaw/openclaw vrelease-publish/f4a0d4875912-1793065112 (27.10.2026) GGitHubvor 6 Std.GitHub Release: openclaw/openclaw v2026.9.35 (27.10.2026) GGitHubvor 4 Std.GitHub Release: openclaw/openclaw v2026.10.10-beta.4 (27.10.2026) GGitHubvor 7 Std.GitHub Release: google-gemini/gemini-cli v0.67.0-nightly.20261027.g363a13119 (27.10.2026)
+6
12 Quellen
Security: Pufferüberlauf in helix (Fedora)
11 weitere Quellen
PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-gitui (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-dua-cli (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in stgit (Fedora) PPro-Linuxvor 3 Std.Security: Pufferüberlauf in rust-gengo-bin (Fedora) PPro-Linux Securityvor 3 Std.Pufferüberlauf in perl-Alien-Brotli (Fedora) PPro-Linux Securityvor 3 Std.Pufferüberlauf in brotli (Fedora)
+5
8 Quellen
CVE-2026-33867 | WWBN AVideo up to 26.0 Database cleartext storage (GHSA-363v-5rh8-23wg)
7 weitere Quellen
Vvuldb.comvor 2 Std.CVE-2026-34362 | WWBN AVideo up to 26.0 functions.php verifyTokenSocket session expiration (GHSA-2mg4-pfgx-64cf) Vvuldb.comvor 2 Std.CVE-2026-33767 | WWBN AVideo up to 26.0 Query String objects/like.php getLike videos_id sql injection (GHSA-fj74-qxj7-r3vc) Vvuldb.comvor 2 Std.CVE-2026-33770 | WWBN AVideo up to 26.0 Title objects/category.php fixCleanTitle clean_title sql injection (GHSA-584p-rpvq-35vf) VVulDB Updatesvor 6 Std.CVE-2026-33764 | WWBN AVideo up to 26.0 save.json.php id authorization VVulDB Updatesvor 6 Std.CVE-2026-33766 | WWBN AVideo up to 26.0 HTTP Redirect isSSRFSafeURL server-side request forgery VVulDB Updatesvor 6 Std.CVE-2026-33761 | WWBN AVideo up to 26.0 Email Message list.json.php User::isAdmin authorization
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4300122/hacking-pentesting/hackers-abuse-connectwise-cloud-backup-credentials-to-launch-ai-driven-microsoft-365-attacks/