TI Mindmap HUB
Threat Intelligence Report

ConnectWise Cloud Backup application abused in cross-tenant token sweep

๐Ÿ“… October 20, 2026 ๐Ÿ“ฐ www.sophos.com ๐Ÿ” 0 CVE(s) referenced

A threat actor likely abused a compromised ConnectWise Cloud Backup application credential to automate Microsoft Graph token requests across every Microsoft 365 tenant that had granted the vendor consent.

vendor

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle