ConnectWise Disables Cloud Backups as Concerns Grow for Managed Service Providers
ConnectWise has disabled its cloud backups amid concerns about the possible effect on managed service providers (MSPs) that rely on its tools. Researchers say attackers were able to authenticate into Microsoft 365 tenants using ConnectWise credentials.
ConnectWise says that customer impact remains unconfirmed. The available details are limited, so it is not yet clear how many organisations, if any, have been affected, or how the credentials were obtained.
For Australian small businesses that use an MSP, the situation is a reminder that your security can depend on the tools your provider uses. It is reasonable to ask your MSP whether it uses ConnectWise services, whether any of your Microsoft 365 accounts could be involved, and what steps it is taking in response.