ConnectWise Disables Cloud Backups Amid Concerns for Downstream MSPs
Summary
ConnectWise has disabled cloud backups due to concerns about downstream Managed Service Providers (MSPs). Attackers reportedly authenticated into Microsoft 365 tenants using ConnectWise credentials, although customer impact remains unconfirmed.
IFF Assessment
FOE
The article describes a security incident where attacker access could lead to further compromise or disruption for managed service providers and their clients.
Defender Context
This incident highlights the critical importance of securing third-party vendor credentials, especially for MSPs who often have broad access to client environments. Defenders should review their access controls and monitor for unusual authentication patterns originating from trusted vendors.