Hackers Breach Microsoft 365 via ConnectWise

Hackers breached Microsoft 365 tenants through a ConnectWise supply-chain attack starting October 15. The malicious actor accessed at least 162 compromised tenants identified by Huntress. Microsoft confirmed unauthorized authentication attempts from IP 144.172.64.128 on October 15. ConnectWise shut down customer access to its Cloud Backup service on October 17 at 05:01 UTC.