All Articles

storm-0940 (1)

Storm-0940 and the ConnectWise Cloud Backup Compromise: How Trusted App Identities Opened 2,250+ Microsoft 365 Tenants

Posted by Priyanka Aash on October 28, 2026 at 10:53pm in Blog

A China-aligned actor used stolen ConnectWise app identities to sign into 2,250+ Microsoft 365 tenants with no user MFA in the loop. Attack chain, Entra ID checks, and why disabling the vendor app does not clean your tenant.

Join The Community Discussion

Breach Watch Weekly: Legitimate Access Did the Damage (Oct 3-9)

Posted by CISO Platform on October 9, 2026 at 2:03am in Blog

Session Highlights : Field Notes from Black Hat & DEF CON 2026: What Changed in the Attacker Playbook?

Posted by pritha on October 7, 2026 at 1:08am in Blog

Session Highlights : Why Traditional ASM and CTEM Tools Will Fail in the Next 12 Months

Posted by CISO Platform on September 22, 2026 at 12:19am in Blog

Cybercriminals Targeting Cybercriminals

Posted by Matthew Rosenquist on September 22, 2026 at 5:36am in Blog

CISO Platform

A global community of 6K+ Senior IT Security executives and 40K+ subscribers with the vision of meaningful collaboration, knowledge, and intelligence sharing to fight the growing cyber security threats.

Join CISO Community Share Your Knowledge (Post A Blog)

#xg { position:relative;top:120px; } #xn_bar { top:120px; }

Hello, you need to enable JavaScript to use CISO Platform.

Please check your browser settings or contact your system administrator.