ConnectWise app breach hits M365 tenants, FortiGate memory implant | Cyber Security News Oct 19
Attackers used ConnectWise's app credentials to enter Microsoft 365 tenants. Also: a FortiGate implant, stolen UpdraftCentral keys, NTLMv1 blocks, AOMEI's update servers, and fixes. Every version number and every fix in this episode was checked against the vendor's advisory or the CVE record before it aired. Today's question: How do you review vendor apps in your tenant? Reply in the comments or at feedback@defensivesecurity.org.
1. ConnectWise app credentials used on M365 tenants - Do: Disable ConnectWise app identities and audit their roles -…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.