Security · Updated 17 Oct, 11:46 am IST
Compromised ConnectWise Cloud Backup credential used to access 173 Microsoft 365 tenants
Why it matters for readers: It explains how attackers can reuse a stolen service credential to infiltrate customer cloud accounts, so you can understand why companies warn customers after breaches.
- Unknown threat actors used a compromised ConnectWise Cloud Backup Microsoft 365 credential to access customer tenants.1
- Researchers attribute the activity to an active campaign affecting 173 Microsoft 365 tenants.1
- ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers and was formerly called SkyKick.1
- The compromise allowed unauthorized sign-ins to customers' Microsoft 365 environments via the backup service credential.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started