Oct 19, 2026 · 14 min
Cloud backup breach exposes 173 Microsoft 365 tenants
ConnectWise backup app breaches 173 Microsoft tenants, Chinese spies exploit BeyondTrust zero-day, Japan declares first cyber state of emergency
The episode connects a major backup compromise with zero-day exploitation, phishing-market disruption, and Japan’s first cybersecurity state of emergency.
- 1A ConnectWise-related cloud backup breach exposed data from at least 173 Microsoft 365 tenants.
- 2Chinese-language phishing marketplaces faced disruption as attackers continued exploiting remote-support software vulnerabilities.
- 3Japan declared its first cybersecurity state of emergency after a breach and ransomware impacts.
Don't miss
The briefing’s sharpest escalation is Japan declaring its first cybersecurity state of emergency after breach and ransomware impacts.
The brief
David Shipley opens with a concentrated cybersecurity briefing: a cloud backup breach, a U.S. bankruptcy-system outage, disrupted phishing marketplaces, and Japan’s emergency declaration.
The ConnectWise and SkyKick story shows how a service built to protect Microsoft 365 data can become a high-value route into many tenants at once.
The episode then shifts from enterprise exposure to criminal infrastructure, covering the Romulus malware platform and disruption affecting Chinese-language phishing marketplaces.
BeyondTrust Remote Support zero-day exploitation underscores the continuing risk of trusted remote-access tools, while Japan’s response raises the stakes from incident handling to national policy.
The throughline is concentration risk: one cloud service, remote-support product, or criminal marketplace can amplify consequences far beyond a single victim.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.