ConnectWise Suspends Cloud Services in Response to Cyberattack
ConnectWise is scrambling to restore its Cloud Backup, SaaS Security, and Cloud Management services after hackers abused a compromised credential to access customers’ M365 tenants.
The company suspended the Cloud Backup service (formerly known as SkyKick) on October 17, roughly 12 hours after it started investigating the suspicious activity.
“We recently identified unauthorized access to application identities within the ConnectWise Cloud Backup environment. As a protective measure for our Cloud Backup partners and their clients, we are shutting off Cloud Backup application access,” the company said.
The next day, it decided to shut down SaaS Security and Cloud Management as well, to implement mitigations, noting that customers’ backups remain encrypted and protected and that it has no evidence of unauthorized access to them.
The containment measure continues to impact scheduled backups, archive access, and restores, as well as SaaS Security monitoring and alerting, and Cloud Management user and license...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
