Daily Cyber News: ConnectWise access breach reaches Microsoft 365 tenants
ConnectWise is investigating stolen application credentials that were used to authenticate into Microsoft 365 tenants. The company suspended Cloud Backup, SaaS Security, and Cloud Management, then revoked affected certificates and credentials. Security firms observed successful sign-ins and, in a limited number of cases, new administrator access or credentials that could provide another route back into a tenant.
Key context: For leaders, this combines possible Microsoft 365 compromise with the loss of a recovery service during an active investigation.
Additional detail: Preserve the available logs, disable the affected applications, and inspect every connected tenant for new credentials, elevated roles, permission changes, and other persistence.
For more cybersecurity news and the full Daily Cyber newsletter, visit DailyCyber.News.
Cybersecurity training, courses, books, and resources: BareMetalCyber.com.
Topics: cybersecurity news, cybersecurity, cyber risk, microsoft 365, ConnectWise, access, breach, reaches, Microsoft, tenants.
