ConnectWise Application Identities Compromised: What MSPs and Partners Should Check in Microsoft 365
No Comments on ConnectWise Application Identities Compromised: What MSPs and Partners Should Check in Microsoft 365
Attackers got hold of ConnectWise application identities and used them against Microsoft 365 tenants. Here is what has been reported, why stolen app credentials are so dangerous, and what I would check first.
SonicWall SMA 1000 SSRF (CVE-2026-102255) Is Already Being Exploited: Patch Now, Then Assume the Worst
Attackers began probing a CVSS 10.0 pre-auth SSRF in SonicWall SMA 1000 appliances two days after patches shipped. Here's what's known, why this product keeps getting hit, and what I'd do if I ran one.