> TritonInfoSec News
Home / Oct 19, 2026 / Story
0
#2 The Hacker News general October 17, 2026 at 06:16 UTC

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

By [email protected] (The Hacker News)

AI Summary

Threat actors abused a compromised ConnectWise Cloud Backup (formerly SkyKick) Microsoft 365 credential to breach 173 customer M365 environments in an active campaign. The attack exploits the trusted OAuth identity ConnectWise holds within customer tenants, giving attackers broad access without needing individual user credentials. This incident underscores the supply chain risk MSPs pose as a high-value pivot point into downstream customer environments.

Read full article → https://thehackernews.com/2026/10/hackers-use-comp…

Relevance score: 80.0/100

# More from October 19

  1. 1
    ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants The Hacker News
  2. 3
    Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel SecurityWeek
  3. 4
    Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root BleepingComputer
  4. 5
    MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon The Hacker News
  5. 6
    Krybit ransomware: what you need to know Graham Cluley
  6. 7
    US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars SecurityWeek
  7. 8
    Anthropic gives outside AI watchdog “employee-like” access Ars Technica Security
  8. 9
    Irish police force has its Twitter hacked in cryptocurrency scam Graham Cluley
  9. 10
    Inbox flooded with sign-up messages? Email bombing explained WeLiveSecurity (ESET)