跳到正文

Office 365

争议事件

以下收录公开来源中与该品牌相关的争议事件。列出一条并不表示过错已经证实。

返回词条共 1 条

  1. 2026

    ConnectWise调查涉及Microsoft 365的未授权访问

    问题披露

    ConnectWise调查了涉及Cloud Backup应用身份的未授权访问。Huntress记录到攻击者使用遭泄露的ConnectWise Cloud Backup凭据对Microsoft 365进行未授权身份验证,并在160多个客户租户发现登录记录。ConnectWise表示已使受影响的共享凭据失效,并称没有证据显示其存储的备份档案遭到访问。

    品牌回应

    • 整改 — ConnectWise

      ConnectWise says the affected shared credentials have been invalidated.
    • 持续披露 — ConnectWise

      ConnectWise has expanded its technical guidance and published additional suspicious IP addresses for partners to investigate.

    来源摘录

    • Independent research by Huntress documented unauthorized Microsoft 365 authentication using a compromised ConnectWise Cloud Backup credential, with unauthorized sign-ins confirmed across more than 160 customer tenants.
    • ConnectWise continues investigating unauthorized access involving application identities associated with Cloud Backup, formerly known as SkyKick, after attackers used compromised credentials associated with the service to authenticate to customer Microsoft 365 environments.
    • The company discovered the activity October 15