ConnectWise Cloud Backup Incident and Microsoft 365

ConnectWise Cloud Backup credential used to sign in to Microsoft 365 tenants

In mid-October, Huntress and Microsoft reported that attackers had abused a compromised vendor-side credential associated with ConnectWise Cloud Backup (formerly SkyKick) to sign in to customers’ Microsoft 365 tenants. ConnectWise confirmed unauthorized access to its Cloud Backup application identities and took containment measures. Many managed service providers (MSPs) use Cloud Backup to copy their clients’…

Read More

Cyber Dependencies and Attack Surface: ENISA 2026

ENISA Threat Landscape 2026 and cyber dependencies expanding the attack surface

The ENISA Threat Landscape 2026, published on 22 September, has a message that gets less attention than the usual list of threats: organisations are increasingly exposed through their cyber dependencies, meaning the technologies, suppliers and services they rely on. For German businesses, that means cyber risk no longer sits only in internal networks and endpoints.…

Read More

Top 5 Cybersecurity News Stories August 7, 2026

This week’s Top 5 Cybersecurity News Stories August 7, 2026 follows a single structural pattern expressed differently across all five incidents: the attack reached its target not by defeating a security control but by exploiting a trust assumption the security model had treated as a given. An AI agent trusted to operate within the boundaries…

Read More

NIS2 Compliance in Practice: Lessons from Belgium’s First Year

NIS2 compliance

NIS2 compliance has long felt like an approaching deadline rather than a lived reality for many organisations across Europe. That is beginning to change. As member states move from transposition to enforcement, the directive is shifting from policy language to operational impact — altering reporting practices, governance expectations, and supply chain dynamics. Belgium offers one…

Read More

Top 5 Cybersecurity News Stories April 10, 2026

News Stories April 10

This week’s Top 5 Cybersecurity News Stories April 10, 2026 are not a recap, they are a strategic read of where risk is concentrating. From compromised DevOps tooling and mobile management platforms to healthcare vendor dependency, identity abuse, and AI infrastructure risk, these signals show pipelines that deploy automatically, management platforms that govern devices, vendors…

Read More