SkyKick

ConnectWise Cloud Backup Credential Compromise Exposes Microsoft 365 Tenants

Attackers abused a compromised ConnectWise Cloud Backup application credential to obtain Microsoft Graph tokens across customer Microsoft 365 tenants, prompting ConnectWise to disable Cloud Backup application access.