Microsoft 365 tenants breached through trusted ConnectWise identities
Daily Cyber News: ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
Microsoft 365 tenants were compromised after unknown attackers gained unauthorized access to ConnectWise application identities. ConnectWise has suspended Cloud Backup and disabled seven identities while it investigates. The available disclosure doesn’t say how many tenants were affected, how the attackers gained access, or how long they remained inside, so the full scope is still unresolved.
Key context: Trusted application identities can hold broad permissions across customer cloud environments.
Additional detail: The broader lesson is that service integrations need the same oversight as privileged human accounts.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, microsoft 365, ConnectWise Suspends Cloud Backup After Attackers, Compromise Microsoft 365 Tenants, ConnectWise, Suspends, Cloud, Backup.
