Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
MentionsConnectWiseMicrosoftMicrosoft 365
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments. ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs
Summary from The Hacker News.
Related coverage
Other sources covering the same vulnerabilities or event.