The Hacker News2026-10-17 06:16:46

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments.

Summary

ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

This is a brief wire summary, the full story (linked below) has the complete details.

KazaSec's take

Phishing and credential-based attacks succeed because they target people, not just infrastructure, technical controls like SPF, DKIM, and DMARC only ever close part of that gap. The rest comes down to whether a team can actually spot the fake, and whether a compromised credential can still be reused anywhere else.

Coverage details

Source: The Hacker News
Published: 2026-10-17 06:16:46
Author: the hacker news
Category: technology

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services