Cybersecurity jobs report, ConnectWise suspends cloud backup, Drupal patches flaws - LinkedIn

IT management software company ConnectWise shut down several of its services this weekend after Microsoft and other cybersecurity companies warned of a supply chain attack impacting its cloud backup system.  ConnectWise initially said on Friday that it was investigating “attempts of unauthorized access associated with the ConnectWise Cloud Backup environment,” and confirmed such access on Saturday.   Incident responders at cybersecurity firm Huntress said a credential belonging to ConnectWise Cloud Backup was compromised and used to gain access to the customers’ Microsoft 365 environment.  Microsoft confirmed in its own statement that threat actors “likely abused permissions previously granted by customers to the application, including highly elevated permissions like Directory. ReadWrite. All.”  ConnectWise Cloud Backup is a cloud-based backup and recovery service designed to help protect data in Microsoft 365 and Google Workspace. The tool needs broad access to mailboxes, OneDrive, SharePoint, Teams and other data, according to Huntress.

Managed service providers said an attacker used compromised credentials to gain access to tenants. ConnectWise headquarters in Tampa, Florida. The company suspended service to its Cloud Backup service after a supply chain attack using compromised credentials.

Huntress alleges takeover of M365 accounts SaaS-for-managed services providers ConnectWise has initiated a “service interruption” for its some of its offerings after detecting unauthorized access. ConnectWise offers ERP tailored to the needs of managed services providers (MSPs), plus tools they can use to manage their customers’ environments. Cloud Backup is one of those tools and does what it says on the tin for data stored on-prem, in the cloud, or in SaaS services like M365 and Google Workspace. On October 16, the company published an advisory revealing that on the 15th it “identified unauthorized access to application identities within the ConnectWise Cloud Backup environment.”

A supply-chain attack involving ConnectWise’s cloud services has exposed Microsoft 365 customers to unauthorized application access, with researchers reporting successful sign-ins across 173 partner and customer tenants. The incident centres on credentials associated with ConnectWise Cloud Backup, formerly SkyKick, and raises concerns about attackers exploiting permissions already entrusted to business software. ConnectWise has confirmed unauthorized access to application identities within its Cloud Backup environment. In an October 17 update on its service-status page, the company said it was shutting off application access, interrupting customer backups while investigation and remediation continued.

Support WBURBoston's Saturday Morning NewsletterPumpkins for sale in a market in Carver, Massachusetts. (Getty Images)Editor's Note: This is an excerpt from WBUR's Saturday morning newsletter, The Weekender. If you like what you read and want it in your inbox, sign up here. I’m a big fan of pumpkins and jack-o’-lanterns. (You might even say they send me out of my gourd.) They’re a seasonal decoration that’s easy enough to set up — no lights to string up or plants to water. And there’s a certain New England charm that comes with taking the time to get dressed in your autumn best to pick your own. Orange, red and yellow leaves on the ground compliment the color of the pumpkins in the patch (and, perhaps, the flannel or sweater you’re wearing, too). If you’ve yet to pick up a pumpkin this season, this weekend is set to deliver two crisp, cool days to do so. And to help you choose where to go, we’ve pinpointed five pumpkin patches and farms in Massachusetts that offer a little extra fun for visitors. For pumpkin picking and…