Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants

Microsoft says a China-linked espionage group used compromised ConnectWise application credentials and AI automation to attack more than 2,250 Microsoft 365 tenants, with some environments reaching privileged access in under three hours. For CIOs and IT leaders, the key business risk is that trusted third-party integrations can become a high-speed path into cloud environments, making supply-chain access, identity controls, and privilege governance central to resilience. The incident underscores that AI is now amplifying the scale and speed of credential abuse, so IT organizations need stronger monitoring, tighter vendor permissions, and faster containment playbooks.