ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access
ID: a05d8529-754f-5de9-b6cf-cfb84c3e2f01
STIX ID: report--a05d8529-754f-5de9-b6cf-cfb84c3e2f01
Feed Name: Help Net Security
Threat Score
ConnectWise disclosed that attackers used a compromised Cloud Backup (SkyKick) application credential to authenticate as an application identity across multiple Microsoft 365 tenants, enabling unauthorized access to customer environments; ConnectWise suspended Cloud Backup, SaaS Security and Cloud Management services, revoked affected credentials and certificates, and published remediation guidance while third-party forensics investigate confirmed access to at least 162 tenants and broader sign-in activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.