{
  "id": 15140052,
  "title": "Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants",
  "url": "https://urgent.news/2026/10/17/hackers-use-compromised-connectwise-credential-to-sign-in-to-173",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-17T06:16:46.000Z",
  "source": {
    "name": "The Hacker News",
    "slug": "the-hacker-news",
    "url": "https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html"
  },
  "original_language": "en",
  "account": "Cybersecurity researchers have warned of an ongoing campaign where hackers are exploiting a compromised ConnectWise Cloud Backup credential to gain unauthorized access to 173 Microsoft 365 tenants. ConnectWise Cloud Backup is a cloud-based backup and recovery service for managed service providers to secure their clients' Microsoft 365 or Google Workspace data. The compromised credential allows attackers to access mailboxes, OneDrive, SharePoint, Teams, and directory data in every tenant where the app is installed, posing a significant risk to organizations that have the app installed.",
  "summary": "Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}