An API secret for ConnectWise Cloud Backup (formerly SkyKick) has been compromised. The credential is being used to gain unauthorized access to customers’ Microsoft 365 (M365) environments, impacting at least 162 tenants. Suspicious Sign-Ins Came From a Hosting Provider IP Huntress reported on October 16 that, the day before, the application’s identity (Application ID 506e08f9-6e9a-4da4-942b-a099a03644ae) […]
| # | Наименование новости | Тональность | Информативность | Дата публикации |
|---|---|---|---|---|
| 1 | Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack | 0 | 13.31 | 17-10-2026 |
| 2 | ConnectWise touché par la compromission de ses identifiants chez 173 locataires Microsoft 365 | 0 | 13.81 | 18-10-2026 |
| 3 | 81 million login attempts hit Microsoft 365 accounts as hackers try password-spraying to force entry using stolen credentials and OAuth to bypass authentication | -2 | 8 | 02-07-2026 |
| 4 | Касперский обнаружил технику ConsentFix, позволяющую взламывать аккаунты Microsoft 365 без пароля | 0 | 13.85 | 22-07-2026 |
| 5 | Microsoft Links Hotel Wi-Fi Attacks Stealing Microsoft 365 Accounts to Russian Hackers | 0 | 11.88 | 06-08-2026 |
| 6 | Russische Angreifer: Microsoft-365-Zugangsklau durch Hotel-Router | 0 | 21.84 | 27-07-2026 |
| 7 | Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook | 0 | 9.3 | 04-08-2026 |
| 8 | Fake IT Support Scams Hit Nearly One in Three Organizations on Teams | 0 | 9.37 | 13-10-2026 |
| 9 | OpenCode hack exposes API keys amid AI distillation attacks | 0 | 9.81 | 19-10-2026 |