ConnectWise Cloud Backup breach leads to compromised M365 tenants

ConnectWise disabled customer access to its Cloud Backup service after threat actors compromised application identities. This supply-chain attack allowed unauthorized access to connected Microsoft 365 tenants. Administrators are advised to immediately audit integrated application permissions and revoke suspicious API tokens.