On October 17, 2026, ConnectWise shuts down access to its Cloud Backup service after attackers compromised the service’s application identity and signed into Microsoft 365 tenants using permissions customers had already granted. Audit your vendors’ service principals, disable the implicated ConnectWise apps, and revoke their secrets.

On September 8, 2026, ConnectWise shipped a fix for CVE-2026-84869, a missing authorization (CVSS 9.9) that lets an attacker push and run files on a machine during an active ScreenConnect session without host confirmation. Upgrade the client to version 26.6.5, then audit past sessions and file transfers before remote access becomes the entry point into your fleet.