Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threat actors obtained unauthorized access to the application identities and compromised Microsoft 365 tenants.
Summary
The disabled identities are listed below - ConnectWise Cloud Backup - 506e08f9-6e9a-4da4-942b-a099a03644ae ConnectWise
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Most public cloud incidents trace back to a misconfiguration, an overly permissive IAM role, a storage bucket left open, a default setting nobody revisited, rather than a flaw in the cloud provider itself. A cloud security review is built to catch exactly that class of mistake before it's found the hard way.
Coverage details
Related security advisories
Relevant from KazaSec
More security news
We help organizations find and fix the gaps before they make headlines.