ConnectWise Cloud Backup Suffers Breach, Affecting 173 Microsoft 365 Tenants

ConnectWise has disabled customer access to its Cloud Backup service after confirming a breach where hackers hijacked the application's identity within Microsoft 365. This allowed unauthorized sign-ins to 173 customer tenants without requiring passwords or multi-factor authentication. The incident highlights a significant cybersecurity vulnerability in app-only OAuth credentials.