Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor... Weiterlesen: Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
50 sources
CVE-2026-112261 | Red Hat GIMP XCF use after free (EUVD-2026-104653)
49 more sources
VVulDB Updates1 hour agoCVE-2026-112260 | GIMP XCF out-of-bounds (EUVD-2026-104589) VVulDB Updates1 hour agoCVE-2026-112258 | GIMP XCF Loader use after free (EUVD-2026-104652) VVulDB Updates3 hours agoCVE-2026-113712 | CachetHQ Cachet up to 2.4.1 Incident Creation Form cross site scripting (EUVD-2026-105261) VVulDB Updates3 hours agoCVE-2026-43841 | Advantech ADAM-3600 prior 2.8.5.0 License Manager Service rpc_rx_fsm null pointer dereference (EUVD-2026-104842) VVulDB Updates3 hours agoCVE-2026-111090 | Stormshield Network Security up to 4.3.44/4.8.19/5.0.9/5.1.3 Signature Verification improper authentication (EUVD-2026-104828) VVulDB Updates3 hours agoCVE-2026-43854 | Advantech ADAM-3600 prior 2.8.5.0 information disclosure (EUVD-2026-104855)
+43
45 sources
CVE-2026-97603 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 idpf idpf_vport_intr_rel race condition (WID-SEC-2026-3579)
44 more sources
VVulDB Updates2 hours agoCVE-2026-97604 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vfb vfb.c vfb_remove cmap use after free (WID-SEC-2026-3579) VVulDB Updates2 hours agoCVE-2026-97605 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 erofs xz_dec_microlzma_reset allocation of resources (WID-SEC-2026-3579) VVulDB Updates2 hours agoCVE-2026-97606 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 autofs autofs_fill_super memory leak (WID-SEC-2026-3579) VVulDB Updates2 hours agoCVE-2026-97607 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 vdpa vdpa_alloc_device allocation of resources (WID-SEC-2026-3579) VVulDB Updates2 hours agoCVE-2026-97608 | Linux Kernel up to 6.12.110/6.18.52/7.2.6/7.3-rc2 Netfilter nf_log_unregister null pointer dereference (WID-SEC-2026-3579) VVulDB Updates2 hours agoCVE-2026-97609 | Linux Kernel up to 6.18.52/7.2.6/7.3-rc2 cttimeout ctnl_timeout_find_get use after free (WID-SEC-2026-3579)
+38
16 sources
CVE-2022-47129 | PHPOK 6.3 privilege escalation (EUVD-2022-49904)
15 more sources
VVulDB Updates2 hours agoCVE-2022-47132 | Academy LMS up to 5.9 Add Administrator cross-site request forgery (EUVD-2022-49907) VVulDB Updates2 hours agoCVE-2022-47188 | Generex UPS CS141 prior 2.06 Backup File symlink (EUVD-2022-49963) VVulDB Updates2 hours agoCVE-2022-47189 | Generex UPS CS141 prior 2.06 Firmware File denial of service (EUVD-2022-49964) VVulDB Updates4 hours agoCVE-2022-47125 | Tenda A15 15.13.07.13 /goform/WifiBasicSet wrlEn_5g stack-based overflow (EUVD-2022-49900) VVulDB Updates4 hours agoCVE-2022-47126 | Tenda A15 15.13.07.13 /goform/WifiBasicSet wrlEn stack-based overflow (EUVD-2022-49901) VVulDB Updates4 hours agoCVE-2022-47127 | Tenda A15 15.13.07.13 /goform/WifiBasicSet wrlPwd stack-based overflow (EUVD-2022-49902)
+9
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4278932/cyber-security-bulletins/hackers-use-connectwise-skykick-credentials-to-access-microsoft-365-halting-cloud-backups/