ConnectWise Cloud Backup breach compromises Microsoft 365 tenants via app identities

ConnectWise disabled access to its Cloud Backup service after attackers compromised application identities, enabling unauthorized access to Microsoft 365 tenants. The incident is a supply-chain attack affecting downstream customers, with scope and data impact still under investigation. This highlights the risk of third-party access to cloud environments.