CISA: Threat actors target M365 credentials via Commvault vulnerability (DigWatch)

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about unauthorized activity targeting Commvault’s Microsoft Azure-hosted applications, particularly the company’s Microsoft 365 (M365) backup software-as-a-service (SaaS) platform known as Metallic. According to CISA, threat actors may have accessed client secrets stored by Commvault, potentially gaining unauthorized access to customer M365 environments.

CISA: Threat actors target M365 credentials via Commvault vulnerability | Digital Watch Observatory