ConnectWise customers hit by supply-chain attack linked to compromised API secret

By Matt Kapko

AI Summary

A compromised API secret tied to ConnectWise's Cloud Backup service enabled attackers to authenticate into connected Microsoft 365 tenants, impacting hundreds of confirmed customers in a supply-chain-style attack against the managed service provider platform. ConnectWise responded by resetting credentials, replacing application keys, and taking Cloud Backup offline while the investigation continues. MSPs relying on ConnectWise for M365 backup should audit tenant access logs for unauthorized activity.

Read full article → https://cyberscoop.com/connectwise-cloud-backup-su…

Relevance score: 76.0/100

# More from October 21

1
PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert The Hacker News
2
Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader The Hacker News
3
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software The Hacker News
4
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA The Hacker News
5
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution The Hacker News
6
AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign SecurityWeek
7
Police arrest Qilin ransomware suspect on holiday, as links made to Synnovis hack that contributed to patient’s death Graham Cluley
8
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The Hacker News
9
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election The Hacker News