ConnectWise Cloud Backup Credential Abuse: 173 M365 Tenants Compromised in Trust-Through-Defaults Incident

Threat actors weaponized a vendor-managed credential in ConnectWise Cloud Backup to authenticate across 173 Microsoft 365 tenants on October 15, 2026. The credential lived in ConnectWise’s own tenant. Customer-side defenses – multi-factor…