ConnectWise Cloud Backup application abused in cross-tenant token sweep

Sophos NewsOctober 19, 2026Endpoint Cloud

MentionsConnectWise Microsoft

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Summary from Sophos News.

Read the full article at Sophos News

Other sources covering the same vulnerabilities or event.

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

The Hacker News4d agoThreat IntelCloudIdentity

More in Endpoint

SANS Stormcast Wednesday, October 21st, 2026: eMudhra Intermediate CA Certificates Revoked; Critical PHP Security Release; Oracle CPU E-Business Suite SQLi (CVE-2026-101767); FortiSIEM gRPC RCE PoC

Podcast6 minSANS Internet Storm Center StormCast6h agoAppSecEndpointVulnerabilitiesCVE-2026-101767

FBI says SafePay ransomware gang ‘among most active’ with more than 600 victims since 2024

The Record11h agoThreat IntelEndpointVulnerabilities

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

The Hacker News16h agoEndpointNetworkVulnerabilitiesCVE-2026-0257

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

SecurityWeek18h agoThreat IntelAppSecEndpoint

Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election

The Hacker News19h agoThreat IntelEndpoint