ConnectWise Suspends Cloud Backup After Attackers Reach Microsoft 365 Tenants

IT management software provider ConnectWise has suspended its Cloud Backup service while it investigates an incident involving unauthorised access. According to The Hacker News weekly recap, unknown threat actors obtained access to ConnectWise application identities and used that access to compromise Microsoft 365 tenants.

ConnectWise said it disabled seven of its application identities on October 17, 2026, at 07:00 UTC. It also suspended Cloud Backup for all users by revoking the certificates used for the affected application connections. The company's investigation is continuing, and the source excerpt does not say how many customers were affected or how the access was gained.

The incident is a reminder that problems often arrive through services people already trust. The recap describes a week where trusted connections, overlooked systems and old bugs all created openings for attackers. This item is only one part of a wider weekly roundup, and the excerpt we reviewed covers only the opening of that article. Businesses that rely on ConnectWise tools or Microsoft 365 should watch for updates from their provider.