Third Party Risk

Global – October 17, 2026 -- ConnectWise is investigating attempted unauthorized access to its Cloud Backup for Microsoft 365 service, formerly SkyKick Cloud Backup, after disclosing the incident on October 16. The company says containment measures are in place and it has no indication that partner backup data was accessed. The investigation is ongoing.

Community reports allege attacker used the backup app's Entra credentials

Separate reports in the MSP community describe an attacker using the backup service's Microsoft Entra application to enter customer tenants and exfiltrate email, SharePoint and Teams data. ConnectWise has not confirmed these reports.

ConnectWise published indicators tied to the suspicious authentication activity: source IP 144.172.64.128 and the user agents Python-urllib/3.12 and python-requests/2.31. The company notes that their presence alone does not confirm compromise.

Global – October 12, 2026 -- CrowdStrike is adding third-party application insights and AI-enhanced remediation to Falcon Cloud Security, so security teams can identify which cloud-native applications are exposed when an external provider is compromised.

Application code analysis maps vendor dependencies and API operations

Cloud-native applications increasingly rely on third-party and SaaS services for critical business functions. Without dependency visibility, assessing exposure after a provider compromise can mean manually searching code and application inventories.