<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants — Live Feed</title><link>https://www.live-feeds.com/feed/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants</link><atom:link xmlns:atom="http://www.w3.org/2005/Atom" href="https://www.live-feeds.com/feed/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants/rss.xml" rel="self" type="application/rss+xml"/><description>Continuously updated, source-cited coverage.</description>
<item><title>Compromised ConnectWise Credential Hits 173 Microsoft 365 Tenants</title><link>https://www.live-feeds.com/feed/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants</link><guid isPermaLink="false">https://www.live-feeds.com/feed/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants#u142983</guid><pubDate>Wed, 21 Oct 2026 10:52:16 +0000</pubDate><description>Unknown attackers used a stolen credential belonging to ConnectWise Cloud Backup, formerly SkyKick, to gain unauthorized access to 173 Microsoft 365 customer and partner tenants. The breach utilized delegated administrative privileges granted to the backup application, providing broad access to mailboxes, OneDrive, SharePoint, Teams, and directory data. The attack bypassed standard customer-side defenses such as multi-factor authentication and conditional access policies because it relied on a legitimate vendor-managed credential. ConnectWise has suspended its cloud backup services following t</description></item>
</channel></rss>