<![CDATA[Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack]]>ConnectWise has taken its Cloud Backup service (previously known as SkyKick Cloud Backup) offline after attackers gained access to application identities and used them to compromise Microsoft 365 tenants. Customer access to the service has been shut down while the company responds to the incident.

The attack is being treated as a supply-chain compromise, with the intruders leveraging application identities tied to the backup platform to reach downstream Microsoft 365 environments. Details on the full scope of affected tenants have not been disclosed.

  • ConnectWise Cloud Backup (formerly SkyKick Cloud Backup) is currently unavailable to customers
  • Attackers accessed application identities and compromised Microsoft 365 tenants
  • The incident is classified as a supply-chain attack

Organizations using the service should watch for further guidance from ConnectWise and review their Microsoft 365 tenant configurations and application consent settings for anything unexpected.

Source: BleepingComputer

Has your organization reviewed its third-party application permissions in Microsoft 365 since this disclosure?

]]>https://xploitlk.com/topic/721/hackers-breach-microsoft-365-tenants-via-connectwise-supply-chain-attackRSS for NodeTue, 27 Oct 2026 07:23:33 GMTSat, 17 Oct 2026 18:30:21 GMT60