ConnectWise Suspends Cloud Backup Service Following Cyber Attack

On October 17, ConnectWise announced the suspension of its cloud backup service after unknown threat actors gained unauthorized access to application identities, compromising Microsoft 365 tenants. The company disabled seven application identities as part of its investigation. Reports indicate that malicious activity began on October 15, with Huntress confirming at least 162 compromised tenants. ConnectWise stated that existing cloud backup archives remain unaffected and will be accessible once services are restored. This incident highlights the risks associated with supply chain attacks, emphasizing the need for businesses to enhance management and monitoring of application identities.