ConnectWise customers hit by supply-chain attack linked to compromised API secret

ConnectWise customers are experiencing disruptions to Cloud Backup services following a supply-chain attack where a threat actor exploited a compromised API secret. This incident highlights the significant risk posed by supply-chain vulnerabilities, as the attacker gained access to Microsoft 365 environments for hundreds of customers, bypassing security measures like multi-factor authentication. Organizations utilizing third-party integrations should immediately review their access controls and monitor for suspicious activity, particularly within Microsoft 365 environments.

Read the full article at CyberScoop

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.