CISA WARNS OF SUSPECTED BROADER SAAS ATTACKS EXPLOITING APP SECRETS AND CLOUD MISCONFIGS

Summary from the TLDR InfoSec newsletter

Hackers broke into Commvault's cloud backup system and stole secret passwords that let them access customers' Microsoft 365 accounts. The attackers used a security flaw to sneak into the system. U.S. cybersecurity officials are helping investigate and have advised companies on how to protect themselves from similar attacks.