Hackers breach Microsoft 365 tenants through ConnectWise Cloud Backup
Event Brief generated 29 s read
Written by an AI. It was merged from the source on this page and has not been reviewed by a person.
The short version
- ConnectWise shut customer access to Cloud Backup, formerly SkyKick Cloud Backup.
- Attackers accessed application identities and compromised Microsoft 365 tenants.
- The reported vector is a supply-chain attack.
What happened
ConnectWise has shut down customer access to its Cloud Backup service, formerly SkyKick Cloud Backup. According to the report, hackers accessed application identities and used them to compromise Microsoft 365 tenants. The report describes the incident as a supply-chain attack.
Why it might matter
Organizations that use backup or management tools with delegated access to Microsoft 365 may need to review those app identities and their permissions.
What we don’t know yet
The item does not say how many tenants were affected, how the application identities were taken, or when service access will return.
