Ongoing Microsoft 365 Campaign Abuses ConnectWise App

Threat actors have compromised a credential within the vendor’s infrastructure, allowing them to abuse a client assertion that bypasses traditional user authentication.