News
October 2026
3artifacts
News
IAM & Security Weekly Briefing
A compromised Microsoft 365 credential tied to ConnectWise Cloud Backup (formerly SkyKick) was used to sign into 173 customer M365 tenants — a textbook third-party SaaS identity failure.
2026-10-17 cyber-security
News
IAM & Security Weekly Briefing
Denmark disclosed that attackers reached CPR registry data on roughly 8.8 million people through a private company's lawful lookup account — an authorization and third-party access failure, not a…
2026-10-10 cyber-security
News
IAM & Security Weekly Briefing
Denmark's Technical University (DTU) disclosed that attackers accessed its identity and access management system, potentially exposing data on up to 200,000 people.
2026-10-03 cyber-security