A Stolen ConnectWise Credential Walked Into 173 Microsoft 365 Tenants
An attacker used ConnectWise Cloud Backup's own app credential to sign in to 173 partner and customer Microsoft 365 tenants, per Huntress. ConnectWise has taken the service offline and disabled seven app identities.