MEDIUMVulnerability
Global

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

·Source: The Hacker News

Updated:

Executive Summary

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

Analysis

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs
Source Attribution

Originally published by The Hacker News on Oct 17, 2026.

Related Threats

MEDIUMVulnerabilityNEW

UK and EU financial regulators seek answers from Google over cloud outage

The European Banking Authority and the UK's Financial Conduct Authority have been in contact with Google over the major cloud outage earlier this week that knocked out several bank websites.

Finextra
LOWVulnerabilityNEW

Ambulance Firm's $1M Settlement Mandates Data Destruction

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ambulance-firms-1m-settlement-mandates-data-destruction-image_small-1-a-33180.jpg" align=right hspace=4><b>State Deal Follows 2023 Hack of Archived Data and Resolves Separate Fraud Claims</b><br>A former ambulance company has agreed to pay Massachusetts regulators $1 million to resolve allegations of Medicaid billing fraud and als

Bank Info Security
MEDIUMVulnerability

Breach Roundup: Russian Hackers Hit Ukrainian Grain Firm

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/breach-roundup-image_small-2-a-33182.jpg" align=right hspace=4><b>Also: eMudhra Exits TLS Cert Biz, German Police Probe 2024 Synnovis Cyberattack</b><br>Russian hackers wiped a Ukrainian grain logistics firm, eMudhra killed its TLS certs biz, Germany investigated the 2024 Synnovis hack, OpenCode flaw, another Nikkei breach. A Revo

Bank Info Security