Todyl MXDR (threat intelligence blog)

todyl · B · candidate

https://www.todyl.com/blog

researchlang: enfetch failures: 0quiet periods: 0last fetch: never

Added 2026-10-18 (S4): Todyl MXDR threat-intelligence blog, first-hand Microsoft 365 / Entra telemetry write-ups with a running update log; independent corroborating primary for the ConnectWise Cloud Backup (SkyKick) application-credential abuse of 2026-10-15. Feed URL not probed; `extract` reads each post. Candidate: promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

ConnectWise Cloud Backup (formerly SkyKick): the vendor's Microsoft 365 application credential was used to sign in to customer tenants, with directory-role self-assignments in about 50 tenants and added credentials in one2026-10-18