- Published
- Source
- Dark Reading
Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
Trusted Relationship
Initial AccessWhat a defender checks
- List the suppliers with access into your systems, and how they connect.
- Give third parties separate, least-privilege accounts – and monitor them.
- Ask the supplier for indicators of compromise and a timeline.
Build the skillBlue Team Engineer · Risk Assessment & Recommendations Reporting
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Analyst
Every story here started as an alert. Learn to triage them.
Our Blue Team Analyst programme prepares you for a first SOC role: 26 live classes in UK hours, an alert queue worked in Microsoft Sentinel, and a full SOC shift simulation at the end. No security experience needed to start.
- Triage and KQL in Microsoft Sentinel
- Identity, endpoint, email and network investigations
- A verifiable digital badge
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
