Cyber Risks · Sophos Threat Research

Connect Wise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants Categories: Threat Research Tags: connectwise

Read the original at Sophos Threat Research ↗

Topics
Identity & Access Management
Related