SC Media
@SCMagazine
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec t.co/Xyi8IHRc6u
Skykick
Security incidents tagged Skykick. Newest first.
1 Skykick incident in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 1
- Patched
- 0
- Days without an incident
- 0
- Longest quiet run: 3 days (Oct 18–Oct 20)
- CriticalPartly patched
ConnectWise Cloud Backup shut down after M365 app-identity hijack
ConnectWise disabled Cloud Backup after a compromised credential let attackers authenticate as the application and sign in to at least 173 customer Microsoft 365 tenants.
ConnectWise Cloud Backup / Microsoft 365 app identitySince Oct 17, 2026
Posts 2
- ConnectWise Cloud Backup shut down after M365 app-identity hijack
- ConnectWise Cloud Backup shut down after M365 app-identity hijack
The Register@TheRegisterChina-aligned attackers used AI agents and compromised ConnectWise application creds to target more than 2,250 Microsoft 365 tenants, the vendor says. More here: t.co/CrHYzab3cD
