Hackers Compromise ConnectWise Credentials to Breach Microsoft 365 Tenants
· Technology · The Hacker News, BleepingComputer, LinkedIn
Attackers utilized a compromised ConnectWise credential to gain unauthorized access to 173 Microsoft 365 tenant accounts. Cybersecurity researchers discovered the intrusion vector, which allowed the threat actors to bypass standard authentication controls across multiple corporate environments. Organizations affected by the breach are currently auditing their access logs and revoking compromised tokens. The exact identity of the hacker group remains under investigation.
Why it matters
The breach exposes vulnerabilities in third-party IT management software, putting hundreds of corporate networks at risk of data exfiltration and further compromise.
Read the original report — The Hacker News
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.