CYBERSECURITYTRACKER
Permanent story citation

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10576

As cited

Copy frozen at (site build).

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsMicrosoftConnectWise
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseGoogleKaseyaMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseGoogleKaseyaMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseGoogleKaseyaMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseGoogleKaseyaMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

ConnectWise, which owns SkyKick, has had vendor credentials compromised and are being used to gain unauthorized access to Microsoft 365 tenants. The advisory recommends immediate disabling of the affected applications and reviewing access logs for evidence of compromise.

Why it matters: Organizations using ConnectWise or SkyKick applications for Microsoft 365 management must disable these integrations immediately and audit their tenant logs to detect unauthorized access or data exfiltration.

VendorsConnectWiseGoogleKaseyaMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary