Huntress

ConnectWise has suspended its Cloud Backup, SaaS Security, and Cloud Management services after detecting unauthorized access to its systems. Security firm Huntress reports that a compromised Microsoft 365 API secret is being used to infiltrate customer environments, raising fears of a supply-chain attack affecting managed service providers and their clients.

ConnectWise has shut down customer access to its Cloud Backup service after hackers exploited application identities to breach Microsoft 365 tenants, giving them the ability to read emails, files, and Teams chats without triggering multi-factor authentication. Security firm Huntress reported at least 162 compromised tenants, and Microsoft confirmed it detected malicious authentication attempts from a single IP address on October 15.