Skip to content
NewA calmer, faster ZeroHour

ConnectWise Cloud Backup breach page lacks incident details

Original title: ConnectWise Cloud Backup Breach: What We Know

SOCRadarby Ameer Owda ()11 min read
Part of a story covered by 6 sourcesINC ransomware operators exposed AI servers and 46 encryptor buildsMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

The supplied SOCRadar page is site navigation and does not describe what was accessed or who was affected.

A SOCRadar blog title says there is a ConnectWise Cloud Backup breach and asks what is known. The text provided with the item is website navigation, product marketing and tool listings, not the article body. No victim count, data types, timeline or response is stated in the supplied text.

Unconfirmed: The breach is only asserted by the page title; the supplied text does not confirm scope, cause or impact.

Key facts
  • The title names ConnectWise Cloud Backup as the subject of a breach.
  • No compromise details appear in the captured page text.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

11 min read at socradar.io

ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer Microsoft 365 environments. A vendor-controlled Microsoft 365 application credential was compromised and used to obtain Microsoft Graph access tokens in customer tenants.

SOCRadar

By Ameer Owda · socradar.io

Read the full article at SOCRadar

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.