ConnectWise on Monday said it has taken remediation measures, including strengthening administrative-access protections and resetting accounts and replacing application credentials, as it...
The company says "no successful threat activity" has been observed on its own environments. Partners, however, may still be at risk
ConnectWise initially said on Friday that it was investigating "attempts of unauthorized access associated with the ConnectWise Cloud Backup environment," and confirmed such access on Saturday.
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access...
"Follow-on activity included Microsoft Graph API reconnaissance and attempts to add additional credentials on the related service principal in target tenants..."
First reported:
First saved on ClustZ:
Coverage updated:
We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.