ConnectWise supply-chain attack via compromised API secret hits hundreds of customers

Attackers used a compromised API secret to breach ConnectWise's connected Microsoft 365 applications, impacting hundreds of customers in a supply-chain attack. The scope of data accessed and the duration of the compromise remain unclear. This highlights the risk of third-party software dependencies and credential management in enterprise environments.