Tag: ConnectWise
ConnectWise froze cloud backups after a token leaked into the wild
Huntress counted 162 Microsoft 365 tenants with sign-ins traced to one vendor-held application identity, and the services stayed dark through…
ConnectWise kills cloud backups after seven app identities were hijacked
The vendor revoked certificates and stopped scheduled backups after intruders used stolen application credentials to reach customer Microsoft 365 tenants.
Hijacked backup app tokens opened 173 Microsoft 365 tenants
Microsoft says a compromised ConnectWise Cloud Backup OAuth application let an intruder mint access tokens across 173 customer tenants.
ConnectWise patches a ScreenConnect flaw that let sessions move files
ConnectWise closed a ScreenConnect gap that let live sessions move and run files without consent.
Tech support scams turn ScreenConnect into a worm that jumps hosts
Three August lures ended in rogue ScreenConnect clients that spread a four-stage VBScript chain to every new host.
ConnectWise Automate Plugin Flaw Opens Door to Remote Code Execution
A high severity flaw in ConnectWise Automate's plugin loading mechanism could allow network based attackers to run malicious code without…