ConnectWise Cloud Backup Incident and Microsoft 365

ConnectWise Cloud Backup credential used to sign in to Microsoft 365 tenants

In mid-October, Huntress and Microsoft reported that attackers had abused a compromised vendor-side credential associated with ConnectWise Cloud Backup (formerly SkyKick) to sign in to customers’ Microsoft 365 tenants. ConnectWise confirmed unauthorized access to its Cloud Backup application identities and took containment measures. Many managed service providers (MSPs) use Cloud Backup to copy their clients’…

Read More