Topic: Data Breaches, Leaks & Scams
Vendors: Microsoft
ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants
ConnectWise breach threatens your Microsoft 365 data. ConnectWise disabled seven application identities after unknown threat actors accessed them and compromised Microsoft 365 tenants. The provider revoked Cloud Backup certificates, blocking new authentication but not undoing prior changes. Previously issued tokens may stay valid until expiry, and scheduled backups are currently halted.
Zero Day Brief #23 · 20 Oct 2026
Sources
Story so far
- ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks – Huntress
first report - Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants – The Hacker News
- Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack – BleepingComputer
- ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants – The Hacker News
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFU – The Register Security
- Attackers Abuse Stolen ConnectWise Application Credentials to Target Microsoft 365 – Security Affairs
- ConnectWise Shuts Off Cloud Services After 'Unauthorized Access' to Microsoft 365 Tenants – Infosecurity Magazine
- ConnectWise backup credentials exposed multiple Microsoft 365 tenants – CSO Online
- Fake Calendar Invites Target 40,000 Firms in Microsoft Credential Theft – HackRead
- ConnectWise Suspends Cloud Services in Response to Cyberattack – SecurityWeek
- ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access – Help Net Security
- ConnectWise suspends Cloud Backup service as hacker targets Microsoft 365 users – Cybersecurity Dive
victims: 365 - Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack – SecurityWeek
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring Backdoor – The Hacker News
- ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs – Dark Reading
- ConnectWise suspends Cloud Backup service after supply chain attack – The Record
- ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident – The Hacker News
- Scammers Abuse Frame.io Notifications to Steal Microsoft 365 Credentials – HackRead
- AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign – SecurityWeek
- AOMEI yet to notify customers after hackers hijacked its software updates – The Record
- AOMEI Backupper servers hijacked for minutes at a time to push backdoor – Help Net Security
- ConnectWise customers hit by supply-chain attack linked to compromised API secret – CyberScoop
attacker named
Fact-checked against the sources above before publishing. AI-assisted script, synthetic voice, human-approved. Found an error? Tell us.
