Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan Semon confirmed unauthorized sign-ins across 162 tenants as of 19:00 UTC on October 16, exposing risks associated with privileged vendor... Weiterlesen: Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application…
Ethical Hacking GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
46 sources
CVE-2026-64305 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 qat use after free
45 more sources
VVulDB Updates2 hours agoCVE-2026-68258 | Linux Kernel up to 6.18.41/7.1.5/7.2-rc2 drm-amdkfd mqd_size_from_queue_type memory corruption VVulDB Updates2 hours agoCVE-2026-68273 | Linux Kernel up to 6.12.102/6.18.43/7.1.5 amdgpu amdgpu_ctx_init use after free (Nessus ID 339550) VVulDB Updates6 hours agoCVE-2026-63966 | Linux Kernel up to 6.18.34/7.0.11 Iio Imu Adis16550 adis16550_trigger_handler missing initialization VVulDB Updates6 hours agoCVE-2026-63959 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Tcpm Tcpci Maxim stack-based overflow VVulDB Updates6 hours agoCVE-2026-63964 | Linux Kernel Ucsi Ccg Driver do_flash null pointer dereference VVulDB Updates6 hours agoCVE-2026-63965 | Linux Kernel up to 6.18.34/7.0.11 Bmp280 Pressure Driver bmp280-core.c bmp580_trigger_handler information disclosure
+39
17 sources
CVE-2026-97827 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100428)
16 more sources
VVulDB Updates3 hours agoCVE-2026-97826 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100427) VVulDB Updates3 hours agoCVE-2026-97825 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100426) VVulDB Updates3 hours agoCVE-2026-97824 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100425) VVulDB Updates3 hours agoCVE-2026-97822 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100423) VVulDB Updates3 hours agoCVE-2026-97823 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100424) WWindows Latest4 hours agoStick with Outlook Classic for now, as Microsoft delays new Outlook’s unified inbox, a feature Windows 10’s free Mail app had for years
+10
11 sources
CVE-2026-106182 | Google Chrome up to 154.0.8037.97 Paint ui layer (WID-SEC-2026-3761)
10 more sources
VVulDB Updates2 hours agoCVE-2026-106184 | Google Chrome up to 154.0.8037.97 Media uninitialized resource (WID-SEC-2026-3761) VVulDB Updates2 hours agoCVE-2026-106185 | Google Chrome up to 154.0.8037.97 Viz input validation (WID-SEC-2026-3761) VVulDB Updates2 hours agoCVE-2026-106186 | Google Chrome up to 154.0.8037.97 CredentialProvider uncontrolled search path (WID-SEC-2026-3761) VVulDB Updates2 hours agoCVE-2026-106189 | Google Chrome up to 154.0.8037.97 ReaderMode code injection (WID-SEC-2026-3761) VVulDB Updates2 hours agoCVE-2026-106190 | Google Chrome up to 154.0.8037.97 Media use after free (WID-SEC-2026-3761) VVulDB Updates2 hours agoCVE-2026-106192 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4278996/ethical-hacking/hackers-use-connectwise-skykick-credentials-to-access-microsoft-365-halting-cloud-backups/