Research
#msp1 article with this tag.
ConnectWise Cloud Backup: a vendor credential, and Microsoft 365 tenants
In October 2026 attackers used a Cloud Backup application's credential to sign in to customer Microsoft 365 tenants. What is known, and what to check in your tenant.
My own findings will go here once they are published. I only publish with permission from the affected party.
Spotted an error in a post? Email hello@ryanhenrick.com.