Browsing: ConnectWise

This story was originally published on Cybersecurity Dive. To receive daily news and insights, subscribe to our free dailyCybersecurity Dive newsletter.

The IT management software provider took this action on Saturday, disabling sevenConnectWiseapplication identities as it “continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.” It has also suspended Cloud Backup service by revoking certificates used for affected application connections across all…

On October 13, 2026, unauthorized access was detected across 173 Microsoft 365 tenants via a compromised ConnectWise service account credential. The attackers exploited delegated admin privileges, enabling broad access to sensitive data including mailboxes, OneDrive, SharePoint, Teams, and directory information. The incident did not involve a software vulnerability in ConnectWise but rather the theft or exposure of a…

A supply-chain attack involving ConnectWise’s cloud services has exposed Microsoft 365 customers to unauthorized application access, with researchers reporting successful sign-ins across 173 partner and customer tenants. The incident centres on credentials associated with ConnectWise Cloud Backup, formerly SkyKick, and raises concerns about attackers exploiting permissions already entrusted to business software.

“There’s a big opportunity here to displace a couple of giants,” DataGlu CRO Bill Patchett said.