ConnectWise Suspends Cloud Backup Service Following Unauthorized Access and Microsoft 365 Tenant Compromise

ConnectWise has suspended its Cloud Backup service, formerly SkyKick, due to unauthorized access to application identities and the compromise of associated Microsoft 365 tenants. The company is actively investigating and remediating the incident, which has led to the disabling of seven ConnectWise application identities. This ongoing security incident highlights supply-chain vulnerabilities and the risks associated with extensive permissions in cloud services.