Breachpwn.watch
ConnectWise Cloud Backup shut down after M365 app-identity hijack
Teaser from the source
ConnectWise disabled Cloud Backup after a compromised credential let attackers authenticate as the application and sign in to at least 173 customer Microsoft 365 tenants.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on ConnectWise
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- HighCVE-2026-9089ConnectWise Automate: Download von Code ohne Integritätsprüfung
- HighCVE-2026-9089ConnectWise Automate: Download von Code ohne Integritätsprüfung
Other news entries
- China APT Uses AI Pentest Tool Artex in ConnectWise AttacksNewsSecurityWeek
- Microsoft Links Storm-0940 to ConnectWise Supply Chain AttackNewsDark Reading
- China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsNewsCSO Online
- Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenantsNewsThe Register — Security
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain AttackNewsThe Hacker News
- ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security IncidentNewsThe Hacker News
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPsNewsDark Reading
- ConnectWise Suspends Cloud Services in Response to CyberattackNewsSecurityWeek
Source: https://pwn.watch/i/connectwise-cloud-backup-m365-hijack
ID