Microsoft 365

Everything BlueTeam Herald has reported about Microsoft 365: 2 stories, newest first. Part of our Cyber Attacks coverage.

Cyber Attacks

Secure ConnectWise Credentials to Prevent Storm-0940 AI-Driven Breaches of 2,250 M365 Tenants

Microsoft identifies China-linked Storm-0940 as responsible for compromising 2,250 tenants via stolen ConnectWise application credentials and AI automation.

Oct 22, 2026

Cyber Attacks

Disable ConnectWise SkyKick Apps in M365 Tenants Immediately

Huntress confirms attackers are using stolen vendor credentials to access Microsoft 365 data, requiring immediate app revocation and log review.

Oct 17, 2026