Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants - The Hacker News

Automated excerpt

ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs) to secure their clients' Microsoft 365 or Google Workspace data. Given that the app has extensive permissions to access customer data, an attacker in possession of the tokens can read mailboxes, files, and directory data the backup service can. ConnectWise, in a separate advisory, confirmed it has identified unauthorized access to application identities within the ConnectWise Cloud Backup environment.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.