One Password to Rule Them All: 173 Microsoft 365 Tenants Breached via ConnectWise Leak
A single compromised backup credential has opened the floodgates for hackers to infiltrate hundreds of Microsoft 365 environments simultaneously.
By Blip Tech
1 min read
Cybersecurity researchers have identified an active campaign where threat actors exploited a compromised ConnectWise Cloud Backup credential to gain unauthorized access to 173 Microsoft 365 tenants. By leveraging this administrative entry point, the attackers were able to bypass traditional security perimeters and infiltrate diverse customer environments. This incident serves as a stark reminder of the risks inherent in supply chain integrations and the cascading impact that a single point of failure in cloud-based management tools can have on global enterprise security.
