Who’s Really on Your Incident Response Call?
Picture the worst night of a client’s year. Files are encrypted or stolen, an extortion note is waiting, and the insurance hotline is handing you names. Within hours, a stranger will know the client’s backup status, how much cyber coverage it carries, and how badly it needs to be back online by Monday. Most organizations […]
The App You Approved Three Years Ago Still Has the Keys
Nobody got phished. Nobody’s password was guessed. No MFA prompt was approved by a tired employee at midnight. On October 15, an attacker signed in to customer Microsoft 365 tenants as a backup application. According to Huntress, a credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used to request Microsoft Graph access tokens across […]