Cyber Attacks
Huntress Confirms ConnectWise SkyKick Credentials Used in M365 Breaches
Threat researchers confirm that stolen vendor credentials for ConnectWise SkyKick are being used to access Microsoft 365 data across multiple customer tenants.
SkyKick
Everything Threat Times has reported about SkyKick: 2 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Hackers Exploit Compromised ConnectWise Credential to Access 173 Microsoft 365 Tenants
Threat actors abused a stolen vendor API secret to sign into 173 Microsoft 365 environments, bypassing user authentication and planting persistent access tokens.