vendors/connectwise.htmlSecurity news, advisories and CVEs for ConnectWiseMon, 19 Oct 2026 12:28:44 GMT https://www.infosecurity-magazine.com/news/connectwise-shuts-off-cloud/ekc08wMon, 19 Oct 2026 10:30:00 GMTInfosecurity Magazine. Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client environments via stolen tokens https://securityaffairs.com/201236/hacking/attackers-abuse-stolen-connectwise-application-credentials-to-target-microsoft-365.html1783pvrMon, 19 Oct 2026 09:32:56 GMTSecurity Affairs. Attackers stole ConnectWise application credentials to access Microsoft 365 tenants, prompting the company to suspend cloud services. ConnectWise suspended its Cloud Backup service and took both SaaS Security and Cloud Management offline over the weekend… https://www.theregister.com/security/2026/10/19/connectwise-turns-off-its-saas-y-backup-security-and-management-services-to-probe-security-snafu/5303758mf1hcmMon, 19 Oct 2026 04:31:00 GMTThe Register. Huntress alleges takeover of M365 accounts https://decipher.sc/2026/10/18/ongoing-microsoft-365-campaign-abuses-connectwise-app/122pc42Sun, 18 Oct 2026 15:59:29 GMTDecipher. Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication. https://thehackernews.com/2026/10/connectwise-suspends-cloud-backup-after.html1ivpl15Sun, 18 Oct 2026 08:23:02 GMTThe Hacker News. ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365… https://www.bleepingcomputer.com/news/security/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attack/ye28rtSat, 17 Oct 2026 15:18:51 GMTBleepingComputer. ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]BreachSupply chain https://news.google.com/rss/articles/CBMigwFBVV95cUxOdjBNbGZBM3lMQXRDeTZOcFc4cVFZenVRZUpiWUpMSW1jaEhZV2s5emRvbm9GdGNYbjIxOHRFMXhDbTZzVjBLaGlIN0hpS0RFSURDdkU3UENDblhqN0JWY0FXc1BmblNjQlJBVXVIZjMxS3lLWVhWQ2hxc0oxNEw4TE9Rb9IBiAFBVV95cUxOd3JZcTlEMjF6THlwWU55M2RWSGxObktWY2RlRVVLSFJHc0pBR25mVUVjWVRxeDNhOHF0aUkzTFpzaVFKUlZiNzB5c0huZHVTMkVQQ3FPa3hTVmMxYUlIZEhTdWNaNkVicm9WNWVwbTlydHZsUGFLd2M1SVVHS3VCeWRnMlNuZnVs?oc=51i8dbkfSat, 17 Oct 2026 10:59:30 GMTCybersecurity News. Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 Accounts CyberSecurityNews https://cybersecuritynews.com/connectwise-credentials-microsoft-365-accounts/2gqfplSat, 17 Oct 2026 10:52:09 GMTCybersecurity News. Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted backup application. The incident shows how one leaked vendor secret can create risk across many… https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html8616k0Sat, 17 Oct 2026 06:16:46 GMTThe Hacker News. Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to… https://www.huntress.com/blog/vendor-credential-enables-unauthorized-access15ahe09Fri, 16 Oct 2026 23:00:00 GMTHuntress. ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.Research https://isc.sans.edu/diary/rss/33388iguzjiThu, 01 Oct 2026 05:32:13 GMTSANS ISC. Threat Actors do not always use top-notch techniques or very complex malware to perform their attacks. Sometimes, they just abuse of existing applications...Advisory https://news.google.com/rss/articles/CBMifkFVX3lxTFBfc0dEQ3A2YV9vQU9oZVozRlI3QkJIejllMkI3QldwdENpZW94SXZ4akQ0SlBOUE9ob09GcUZzV3JONTB4NkJYNFVYUjJHV3IyVDd6UWRPcERaQVRiSm1pX1FreV9WeDBWMnBaMlNPdmNYM2xzWkhNY0QxR0dJUQ?oc=5ahq196Thu, 01 Oct 2026 05:32:13 GMTSANS ISC. ScreenConnect Client (Ab)used by AttackersAdvisory https://thehackernews.com/2026/09/attackers-abuse-msp360-to-deploy.html1oq19lsWed, 30 Sep 2026 16:32:59 GMTThe Hacker News. Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. "Once…Phishing