ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant
Last updated October 19, 2026 at 16:45 UTC An attacker used a compromised credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to sign in to customers’ Microsoft 365 tenants. The credential belongs to the application itself, so the attacker inherited the permissions granted to it. Here’s what’s known so far and what to check in […] The post ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant appeared first on SpecterOps.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.