#msp
-
Stolen ConnectWise Credential Opens Door to 173 Microsoft 365 Tenants
Attackers abused a compromised ConnectWise Cloud Backup credential to sign in to its customers' Microsoft 365 environments, inheriting the legitimate app's sweeping permissions.
-
ConnectWise Warns of New ScreenConnect Flaw — No Patch Yet
ConnectWise has disclosed temporary mitigations for a new vulnerability in its ScreenConnect remote access platform. A fix is promised later this week.
-
N-central Breach: The First Patch Didn't Close the Hole, Attackers Took Over MSP Servers
N-able reported that attackers exploited an authentication bypass in the N-central platform, gained administrative access to servers, and reached the client systems managed through them. The first fix turned out to be incomplete.