ConnectWise Supply Chain Attack Hits Microsoft 365

ConnectWise supply chain attack: Storm-0940 abuses stolen cloud app credentials against Microsoft 365 tenants, October 2026

The ConnectWise supply chain attack now has a name behind it. Microsoft assesses that the China state-aligned group Storm-0940 used stolen credentials of ConnectWise cloud applications to sign in to customer Microsoft 365 tenants, with AI agents doing the work. Disabling the ConnectWise connection may not be enough, because the attackers could have added credentials…

Read More