Microsoft malicious activity

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs

Published 17-Oct-2026 11:24 UTC · First seen 17-Oct-2026 11:24 UTC

Sources

• The Hacker News · 17-Oct-2026