Topic
Huntress
Latest news
- 26 OctToken-replay attacks hit Microsoft 365; 97 accounts compromised at 79 organisations
Security researchers at Huntress observed an adversary-in-the-middle campaign between July 14 and September 22, 2026 that captured Microsoft 365 sign-in sessions and replayed tokens. The attackers made over 200,000 failed login attempts, achieved 497 successful sign-ins, compromised 97 accounts and registered 48 rogue Entra devices across 79 organisations.
Security · 1 source
- 18 OctConnectWise Cloud Backup breach used to access Microsoft 365 tenants
Threat actors abused a compromised ConnectWise Cloud Backup (formerly SkyKick) application identity to sign in to Microsoft 365 tenants. ConnectWise disabled affected application identities and paused customer access while investigating after researchers and vendors reported dozens to hundreds of compromised tenants.
Security · 2 sources
Articles
No articles about Huntress yet.