threat-intel
ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU
Info
Summary
ConnectWise has temporarily suspended its Cloud Backup, SaaS Security, and Cloud Management services due to an unauthorized access incident. The company discovered that a Microsoft 365 API secret was compromised and used to gain unauthorized access to customer environments. While existing data remains secure, ConnectWise is urging MSPs and their customers to investigate their M365 environments for signs of compromise and review existing credentials. The company is unable to attribute the incident to a specific threat actor.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data