ConnectWise has suspended access to its Cloud Backup service after hackers exploited application identities to breach customer environments. The attack, which began on October 15, allowed unauthorized access to Microsoft 365 tenants by abusing existing service principal permissions. Security firms Huntress and Todyl confirmed that attackers used automated scripts to sign in, bypassing multi-factor authentication protections. While stored backup data remains secure, administrators are advised to review application credentials and disable implicated integrations to prevent further compromise.
Read the full story at bleepingcomputer.com.
Photo: U.S. Department of Energy (CC0) via Openverse
