ConnectWise shuts Cloud Backup after attackers use it to reach Microsoft 365 tenants
ConnectWise suspended its Cloud Backup service, formerly SkyKick, after attackers abused the app's Microsoft 365 identities to sign in to customer tenants, in what Microsoft called an active supply-chain attack on MSP customers.
ConnectWise suspended its Cloud Backup service, formerly SkyKick, after attackers abused the app's Microsoft 365 identities to sign in to customer tenants, in what Microsoft called an active supply-chain attack on MSP customers. (BleepingComputer; SecurityWeek)
Huntress counted at least 162 compromised tenants by Oct 16. ConnectWise disabled seven application identities, also took SaaS Security and Cloud Management offline, and said it has no evidence backup archives were accessed. Services remained down with no restoration date. (BleepingComputer; SecurityWeek)