#Microsoft 365
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA
Microsoft 365 Token Replay Campaign Hit 79 Organizations Without Defeating MFA Executive summary MFA did not fail in a ten-week Microsoft 365 campaign tracked b...
Lucas Oliveira
Research
ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step
ConnectWise Cloud Backup: Why Disabling the App Is Only the First Step ConnectWise is beginning a phased restoration of Cloud Backup, formerly SkyKick, after un...
Lucas Oliveira
Research
ConnectWise Cloud Backup: Microsoft 365 Access Incident
ConnectWise Cloud Backup: Microsoft 365 Access Incident | 2026 Executive Summary On October 15, 2026, attackers abused a compromised ConnectWise Cloud Backup cr...
Lucas Oliveira
Research
ConnectWise SkyKick Credential Abuse Hits 173 Microsoft 365 Tenants
ConnectWise SkyKick: Compromised Credential Hits 173 M365 Tenants | 2026 Executive Summary Unknown threat actors used a compromised Microsoft 365 credential bel...
Lucas Oliveira
Research
EvilTokens disruption gives defenders a short window to clean up device-code phishing risk
EvilTokens disruption gives defenders a short window to clean up device-code phishing risk Executive Summary Microsoft says it has disrupted infrastructure tied...
Lucas Oliveira
Research