ConnectWise initially said on Friday that it was investigating "attempts of unauthorized access associated with the ConnectWise Cloud Backup environment," and confirmed such access on Saturday.
Huntress alleges takeover of M365 accounts
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access...
"Follow-on activity included Microsoft Graph API reconnaissance and attempts to add additional credentials on the related service principal in target tenants..."
First reported:
First saved on ClustZ:
Coverage updated:
We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you agree to our use of cookies. See our Privacy Policy.