ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

The feed reports active exploitation, supply-chain compromises, credential abuse, phishing, malware deployment, zero-days, and critical vulnerabilities affecting ConnectWise Cloud Backup and Microsoft 365 tenants, npm packages, OpenBSD, AOMEI Backupper, BeyondTrust, FortiOS, Linux virtualization, NGINX, Next.js, Drupal, PAN-OS, Langflow, and other technologies. Several incidents involve unauthenticated or remote code execution, tenant takeover, host-memory disclosure, and active exploitation by state-linked or financially motivated actors.