ConnectWise Cloud Backup Hit by Supply-Chain Attack via Abused OAuth App

Microsoft threat intelligence revealed an active supply-chain attack in which attackers compromised the trusted OAuth app of ConnectWise Cloud Backup (formerly SkyKick) to access data across tenants; researchers warn a single abused app could affect hundreds of M365 tenants.

2026-10-18 ~ 2026-10-19 · 2 related posts

• ConnectWise supply chain attack: one OAuth app may expose hundreds of M365 tenants — cyb3rops · 2026-10-18
• ConnectWise Cloud Backup hit by supply chain attack abusing trusted OAuth app across tenants — cyb3rops · 2026-10-19