Mon, 19 Oct 2026 · 14:57
TRANS_ID: 2026-10-19
Rogue M365 Apps Stealing Global Admin Rights
Weekend rollup: the ConnectWise Cloud Backup (ex-SkyKick) app-identity attack hit 173+ M365 tenants, with one case escalating to Global Administrator, plus BeyondTrust Remote Support CVE-2026-102764 now in CISA KEV. It also covers MC1511052 moving SharePoint agents to Copilot Agent Builder and the Copilot Studio Teams app retirement.
SPECTRUM ANALYSISBITRATE: 320KBPS
0:00—
STANDBYSEC_LVL_3