ConnectWise Resets Credentials as Cloud Backup Remains Offline After Security Incident
Summary
ConnectWise is taking remedial actions following a security incident involving unauthorized access to identities associated with its Cloud Backup service. The company has strengthened administrative access protections, reset accounts, and replaced application credentials.
IFF Assessment
The unauthorized access to sensitive identities in a cloud backup service represents a direct threat to data integrity and availability, which is bad news for defenders.
Defender Context
This incident highlights the critical importance of identity and access management in cloud environments. Defenders should scrutinize how their organizations manage and protect administrative credentials, especially for critical services like cloud backup, and be prepared for potential fallout from compromised identities.