ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.

Summary from Huntress Blog.

Related coverage

Other sources covering the same vulnerabilities or event.

More in Endpoint

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

BleepingComputeryesterdayThreat IntelEndpointVulnerabilities

PHP2Shell: Exposure and Response with the CrowdStrike Falcon Platform

VideoCrowdStrike2d agoEndpointVulnerabilitiesCVE-2026-109618CVE-2026-109619

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

The Hacker News2d agoThreat IntelEndpointVulnerabilities

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

The Hacker News2d agoThreat IntelEndpointAI

Microsoft: Windows Server 2016 reaches end of support in January

BleepingComputer2d agoEndpoint