Source: bleepingcomputer.com
ConnectWise has shut down customer access to its Cloud Backup service, formerly known as SkyKick Cloud Backup, following a security incident in which hackers accessed application identities. The attackers leveraged this access to compromise Microsoft 365 tenants belonging to ConnectWise customers. The incident is classified as a supply-chain attack, as the breach originated through ConnectWise's own infrastructure and affected downstream customers. ConnectWise took the service offline as a containment measure. The attack highlights the risks of third-party cloud backup and management tools having broad access to enterprise Microsoft 365 environments. Organizations using ConnectWise Cloud Backup are advised to review their Microsoft 365 tenant for signs of unauthorized access and review delegated application permissions.
