NewsSophos X-Ops
ConnectWise Cloud Backup application abused in cross-tenant token sweep
Teaser from the source
<p>Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants</p> Categories: Threat Research Tags: connectwise
This is the RSS-feed teaser. Read the full article at the original source.
Read at Sophos X-OpsMore on ConnectWise
Other advisories
- CriticalCVE-2026-84869ConnectWise ScreenConnect: ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability
- CriticalCVE-2026-84869ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- CriticalCVE-2026-84869connectwise screenconnect: unzureichende Rechteverwaltung
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- MediumCVE-2026-11596ConnectWise ScreenConnect: unzureichende Prüfung von Mengenangaben
- HighCVE-2026-9089ConnectWise Automate: Download von Code ohne Integritätsprüfung
- HighCVE-2026-9089ConnectWise Automate: Download von Code ohne Integritätsprüfung
Other news entries
- China APT Uses AI Pentest Tool Artex in ConnectWise AttacksNewsSecurityWeek
- Microsoft Links Storm-0940 to ConnectWise Supply Chain AttackNewsDark Reading
- China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenantsNewsCSO Online
- Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenantsNewsThe Register — Security
- China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain AttackNewsThe Hacker News
- AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromiseNewsMicrosoft Threat Intelligence
- ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security IncidentNewsThe Hacker News
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPsNewsDark Reading
Source: https://www.sophos.com/en-us/blog/connectwise-cloud-backup-application-abused-in-token-sweep
ID