ConnectWise Supply-Chain Attack Exposes Microsoft 365 Tenants to Unauthorized Access

A supply-chain attack targeting ConnectWise's cloud services has compromised Microsoft 365 customers by allowing unauthorized application access. Researchers have identified successful sign-ins across 173 partner and customer tenants, linked to credentials associated with ConnectWise Cloud Backup. This incident highlights vulnerabilities in third-party cloud service integrations affecting Microsoft 365 users.

Originally published by gnews