{"id":2130,"date":"2026-10-19T07:19:51","date_gmt":"2026-10-19T00:19:51","guid":{"rendered":"https:\/\/vncybers.vn\/hieu-vu-connectwise-cloud-backup-danh-tinh-ung-dung-microsoft-365\/"},"modified":"2026-10-19T07:19:51","modified_gmt":"2026-10-19T00:19:51","slug":"understanding-connectwise-cloud-backup-application-identity-attack-microsoft-366","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/hieu-vu-connectwise-cloud-backup-danh-tinh-ung-dung-microsoft-365\/","title":{"rendered":"Understanding the ConnectWise Cloud Backup Attack: How an Application Identity Opened 173 Microsoft 365 Tenants"},"content":{"rendered":"

M\u1ed9t th\u00f4ng tin x\u00e1c th\u1ef1c b\u1ecb x\u00e2m ph\u1ea1m trong d\u1ecbch v\u1ee5 ConnectWise Cloud Backup \u0111\u00e3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111\u0103ng nh\u1eadp v\u00e0o h\u00e0ng tr\u0103m tenant Microsoft 365 b\u1eb1ng danh t\u00ednh \u1ee9ng d\u1ee5ng. S\u1ef1 c\u1ed1 l\u00e0 l\u1eddi nh\u1eafc quan tr\u1ecdng: trong m\u00f4i tr\u01b0\u1eddng SaaS, t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng ph\u1ea3i l\u00e0 danh t\u00ednh duy nh\u1ea5t c\u1ea7n \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7, v\u00e0 x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 kh\u00f4ng th\u1ec3 ng\u0103n m\u1ed9t \u1ee9ng d\u1ee5ng \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n r\u1ed9ng s\u1eed d\u1ee5ng token h\u1ee3p l\u1ec7.<\/p>\n

\"Ph\u00f2ng
H\u1ea1 t\u1ea7ng sao l\u01b0u \u0111\u00e1m m\u00e2y ph\u1ee5 thu\u1ed9c v\u00e0o c\u00e1c danh t\u00ednh \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c tin c\u1eady gi\u1eefa nhi\u1ec1u tenant. \u1ea2nh minh h\u1ecda: Esquilo\/Wikimedia Commons, CC BY-SA 3.0<\/figcaption><\/figure>\n

Chuy\u1ec7n g\u00ec \u0111\u00e3 x\u1ea3y ra?<\/h2>\n

ConnectWise cho bi\u1ebft h\u1ecd ph\u00e1t hi\u1ec7n truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o c\u00e1c danh t\u00ednh \u1ee9ng d\u1ee5ng li\u00ean quan Cloud Backup, tr\u01b0\u1edbc \u0111\u00e2y mang t\u00ean SkyKick Cloud Backup. Microsoft Threat Intelligence m\u00f4 t\u1ea3 \u0111\u00e2y l\u00e0 m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng \u0111ang ho\u1ea1t \u0111\u1ed9ng, trong \u0111\u00f3 \u1ee9ng d\u1ee5ng OAuth \u0111\u00e1ng tin c\u1eady c\u1ee7a nh\u00e0 cung c\u1ea5p b\u1ecb x\u00e2m ph\u1ea1m v\u00e0 \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 l\u1ea5y access token trong c\u00e1c tenant kh\u00e1ch h\u00e0ng.<\/p>\n

Theo d\u1eef li\u1ec7u Huntress \u0111\u01b0\u1ee3c BleepingComputer t\u1ed5ng h\u1ee3p, ho\u1ea1t \u0111\u1ed9ng \u0111\u0103ng nh\u1eadp tr\u00e1i ph\u00e9p \u0111\u00e3 xu\u1ea5t hi\u1ec7n t\u1ea1i 173 tenant. Con s\u1ed1 n\u00e0y ph\u1ea3n \u00e1nh c\u00e1c tenant ghi nh\u1eadn x\u00e1c th\u1ef1c b\u1ea5t th\u01b0\u1eddng, kh\u00f4ng \u0111\u1ed3ng ngh\u0129a d\u1eef li\u1ec7u c\u1ee7a to\u00e0n b\u1ed9 173 t\u1ed5 ch\u1ee9c \u0111\u1ec1u \u0111\u00e3 b\u1ecb l\u1ea5y c\u1eafp. ConnectWise c\u0169ng n\u00f3i ch\u01b0a th\u1ea5y ch\u1ec9 d\u1ea5u kho b\u1ea3n sao l\u01b0u hi\u1ec7n h\u1eefu b\u1ecb x\u00e2m ph\u1ea1m.<\/p>\n

M\u1ed1c th\u1eddi gian \u0111\u00e1ng ch\u00fa \u00fd<\/h2>\n
    \n
  • 13\u201314\/10\/2026:<\/strong> Huntress li\u00ean k\u1ebft c\u00e1c l\u1ea7n \u0111\u0103ng nh\u1eadp d\u1ea1ng script v\u1edbi \u1ee9ng d\u1ee5ng Cloud Backup v\u00e0 \u0111\u1ecba ch\u1ec9 IP c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng.<\/li>\n
  • 15\/10:<\/strong> Microsoft quan s\u00e1t ho\u1ea1t \u0111\u1ed9ng x\u00e1c th\u1ef1c service principal th\u00e0nh c\u00f4ng tr\u00ean di\u1ec7n r\u1ed9ng t\u1eeb IP 144.172.64[.]128.<\/li>\n
  • 17\/10:<\/strong> ConnectWise ng\u1eaft quy\u1ec1n truy c\u1eadp Cloud Backup, v\u00f4 hi\u1ec7u h\u00f3a b\u1ea3y danh t\u00ednh \u1ee9ng d\u1ee5ng v\u00e0 t\u1ea1m d\u1eebng d\u1ecbch v\u1ee5 \u0111\u1ec3 \u0111i\u1ec1u tra.<\/li>\n
  • 18\/10:<\/strong> d\u1ecbch v\u1ee5 v\u1eabn ch\u01b0a ho\u1ea1t \u0111\u1ed9ng; sao l\u01b0u theo l\u1ecbch, truy c\u1eadp kho l\u01b0u tr\u1eef v\u00e0 kh\u00f4i ph\u1ee5c t\u1ea1m th\u1eddi kh\u00f4ng kh\u1ea3 d\u1ee5ng.<\/li>\n<\/ul>\n

    Service principal l\u00e0 g\u00ec?<\/h2>\n

    Trong Microsoft Entra ID, service principal l\u00e0 danh t\u00ednh \u0111\u1ea1i di\u1ec7n cho m\u1ed9t \u1ee9ng d\u1ee5ng b\u00ean trong tenant. M\u1ed9t d\u1ecbch v\u1ee5 sao l\u01b0u c\u1ea7n \u0111\u1ecdc email, t\u1ec7p OneDrive, SharePoint ho\u1eb7c d\u1eef li\u1ec7u Teams, v\u00ec v\u1eady kh\u00e1ch h\u00e0ng th\u01b0\u1eddng c\u1ea5p cho \u1ee9ng d\u1ee5ng c\u00e1c quy\u1ec1n Microsoft Graph t\u01b0\u01a1ng \u1ee9ng. \u1ee8ng d\u1ee5ng sau \u0111\u00f3 x\u00e1c th\u1ef1c b\u1eb1ng secret ho\u1eb7c ch\u1ee9ng th\u01b0 thay v\u00ec t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u.<\/p>\n

    M\u00f4 h\u00ecnh n\u00e0y gi\u00fap t\u1ef1 \u0111\u1ed9ng h\u00f3a ho\u1ea1t \u0111\u1ed9ng gi\u1eefa m\u00e1y v\u1edbi m\u00e1y, nh\u01b0ng c\u0169ng t\u1ea1o ra b\u00e1n k\u00ednh \u1ea3nh h\u01b0\u1edfng l\u1edbn n\u1ebfu th\u00f4ng tin x\u00e1c th\u1ef1c c\u1ee7a nh\u00e0 cung c\u1ea5p b\u1ecb l\u1ed9. K\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n chi\u1ebfm t\u1eebng t\u00e0i kho\u1ea3n; h\u1ecd c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng quy\u1ec1n m\u00e0 kh\u00e1ch h\u00e0ng \u0111\u00e3 c\u1ea5p s\u1eb5n cho \u1ee9ng d\u1ee5ng.<\/p>\n

    V\u00ec sao MFA kh\u00f4ng ch\u1eb7n \u0111\u01b0\u1ee3c cu\u1ed9c t\u1ea5n c\u00f4ng?<\/h2>\n

    MFA ch\u1ee7 y\u1ebfu b\u1ea3o v\u1ec7 lu\u1ed3ng \u0111\u0103ng nh\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. Trong v\u1ee5 vi\u1ec7c n\u00e0y, c\u00e1c y\u00eau c\u1ea7u x\u00e1c th\u1ef1c \u0111\u1ebfn t\u1eeb danh t\u00ednh \u1ee9ng d\u1ee5ng b\u1eb1ng th\u00f4ng tin h\u1ee3p l\u1ec7, kh\u00f4ng c\u00f3 ng\u01b0\u1eddi d\u00f9ng nh\u1eadp m\u1eadt kh\u1ea9u hay nh\u1eadn y\u00eau c\u1ea7u x\u00e1c nh\u1eadn. V\u00ec v\u1eady, quy t\u1eafc ch\u1ec9 t\u1eadp trung v\u00e0o t\u00e0i kho\u1ea3n nh\u00e2n vi\u00ean c\u00f3 th\u1ec3 b\u1ecf l\u1ecdt ho\u00e0n to\u00e0n ho\u1ea1t \u0111\u1ed9ng service principal.<\/p>\n

    \u0110\u00e2y c\u0169ng l\u00e0 l\u00fd do nh\u1eadt k\u00fd \u0111\u0103ng nh\u1eadp kh\u00f4ng t\u01b0\u01a1ng t\u00e1c v\u00e0 nh\u1eadt k\u00fd service principal c\u1ea7n \u0111\u01b0\u1ee3c gi\u00e1m s\u00e1t nh\u01b0 nh\u1eadt k\u00fd ng\u01b0\u1eddi d\u00f9ng. M\u1ed9t l\u1ea7n x\u00e1c th\u1ef1c th\u00e0nh c\u00f4ng t\u1eeb \u0111\u1ecba ch\u1ec9 l\u1ea1, user-agent d\u1ea1ng script ho\u1eb7c ngo\u00e0i m\u1eabu ho\u1ea1t \u0111\u1ed9ng th\u00f4ng th\u01b0\u1eddng ph\u1ea3i \u0111\u01b0\u1ee3c xem l\u00e0 t\u00edn hi\u1ec7u \u0111i\u1ec1u tra.<\/p>\n

    Quy\u1ec1n r\u1ed9ng bi\u1ebfn s\u1ef1 c\u1ed1 nh\u00e0 cung c\u1ea5p th\u00e0nh t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng<\/h2>\n

    BleepingComputer d\u1eabn nghi\u00ean c\u1ee9u c\u1ee7a Todyl cho bi\u1ebft \u1ee9ng d\u1ee5ng c\u00f3 kh\u1ea3 n\u0103ng \u0111\u1ecdc v\u00e0 ghi email, t\u1ec7p \u0111\u00ednh k\u00e8m, OneDrive, SharePoint v\u00e0 h\u1ed9i tho\u1ea1i Teams, t\u00f9y quy\u1ec1n t\u1eebng tenant \u0111\u00e3 c\u1ea5p. Microsoft l\u01b0u \u00fd c\u00e1c quy\u1ec1n c\u00f3 th\u1ec3 bao g\u1ed3m Directory.ReadWrite.All. Huntress c\u00f2n quan s\u00e1t m\u1ed9t s\u1ed1 service principal t\u1ef1 g\u00e1n vai tr\u00f2 th\u01b0 m\u1ee5c, ph\u1ea7n l\u1edbn l\u00e0 Exchange Administrator.<\/p>\n

    \u1ede m\u1ed9t tenant, ho\u1ea1t \u0111\u1ed9ng t\u1ea1o kh\u1ea3 n\u0103ng b\u00e1m tr\u1ee5 ch\u1ec9 m\u1ea5t kho\u1ea3ng n\u0103m ph\u00fat: m\u1ed9t \u1ee9ng d\u1ee5ng li\u00ean quan Teams t\u1ef1 nh\u1eadn quy\u1ec1n Global Administrator r\u1ed3i th\u00eam th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng kh\u00e1c. \u0110i\u1ec1u n\u00e0y cho th\u1ea5y v\u00f4 hi\u1ec7u h\u00f3a \u1ee9ng d\u1ee5ng ban \u0111\u1ea7u l\u00e0 c\u1ea7n thi\u1ebft nh\u01b0ng ch\u01b0a \u0111\u1ee7 n\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 t\u1ea1o secret, ch\u1ee9ng th\u01b0 ho\u1eb7c \u0111\u01b0\u1eddng truy c\u1eadp thay th\u1ebf.<\/p>\n

    T\u00e1c \u0111\u1ed9ng v\u1eadn h\u00e0nh v\u00e0 gi\u1edbi h\u1ea1n c\u1ee7a b\u1eb1ng ch\u1ee9ng<\/h2>\n

    ConnectWise t\u1ea1m d\u1eebng Cloud Backup, SaaS Security v\u00e0 Cloud Management nh\u01b0 m\u1ed9t bi\u1ec7n ph\u00e1p ph\u00f2ng ng\u1eeba. H\u1ec7 qu\u1ea3 tr\u1ef1c ti\u1ebfp l\u00e0 c\u00e1c b\u1ea3n sao l\u01b0u theo l\u1ecbch kh\u00f4ng ch\u1ea1y v\u00e0 kh\u00e1ch h\u00e0ng kh\u00f4ng th\u1ec3 kh\u00f4i ph\u1ee5c t\u1eeb kho b\u1ecb \u1ea3nh h\u01b0\u1edfng trong th\u1eddi gian d\u1ecbch v\u1ee5 ng\u1eebng ho\u1ea1t \u0111\u1ed9ng. Nh\u00e0 cung c\u1ea5p cho bi\u1ebft c\u00e1c kho sao l\u01b0u hi\u1ec7n h\u1eefu v\u1eabn \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a v\u00e0 c\u00f4 l\u1eadp.<\/p>\n

    C\u1ea7n t\u00e1ch bi\u1ec7t ba kh\u00e1i ni\u1ec7m: \u0111\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng, kh\u1ea3 n\u0103ng truy c\u1eadp theo quy\u1ec1n \u0111\u01b0\u1ee3c c\u1ea5p v\u00e0 b\u1eb1ng ch\u1ee9ng d\u1eef li\u1ec7u th\u1ef1c s\u1ef1 b\u1ecb \u0111\u1ecdc ho\u1eb7c xu\u1ea5t ra ngo\u00e0i. Nh\u1eadt k\u00fd Microsoft Graph kh\u00f4ng ph\u1ea3i l\u00fac n\u00e0o c\u0169ng \u0111\u1ee7 chi ti\u1ebft \u0111\u1ec3 ch\u1ee9ng minh t\u1eebng \u0111\u1ed1i t\u01b0\u1ee3ng \u0111\u00e3 \u0111\u01b0\u1ee3c truy c\u1eadp. Do \u0111\u00f3, t\u1ed5 ch\u1ee9c n\u00ean \u0111i\u1ec1u tra theo gi\u1ea3 \u0111\u1ecbnh th\u1eadn tr\u1ecdng nh\u01b0ng tr\u00e1nh kh\u1eb3ng \u0111\u1ecbnh m\u1ea5t d\u1eef li\u1ec7u khi ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng.<\/p>\n

    Danh s\u00e1ch ki\u1ec3m tra \u01b0u ti\u00ean cho qu\u1ea3n tr\u1ecb vi\u00ean<\/h2>\n
      \n
    • T\u00ecm service principal ConnectWise Cloud Backup v\u1edbi App ID 506e08f9-6e9a-4da4-942b-a099a03644ae<\/code> v\u00e0 c\u00e1c \u1ee9ng d\u1ee5ng Cloud Management\/SkyKick c\u0169.<\/li>\n
    • R\u00e0 so\u00e1t \u0111\u0103ng nh\u1eadp service principal t\u1eeb ng\u00e0y 13\/10, \u0111\u1eb7c bi\u1ec7t IP 144.172.64[.]128<\/code> v\u00e0 user-agent d\u1ea1ng Python ho\u1eb7c curl.<\/li>\n
    • Ki\u1ec3m tra thay \u0111\u1ed5i role assignment, OAuth grant, secret v\u00e0 certificate tr\u00ean m\u1ecdi \u1ee9ng d\u1ee5ng li\u00ean quan.<\/li>\n
    • T\u00ecm ho\u1ea1t \u0111\u1ed9ng Microsoft Graph b\u1ea5t th\u01b0\u1eddng, truy c\u1eadp Exchange, SharePoint, OneDrive v\u00e0 Teams v\u01b0\u1ee3t m\u1eabu v\u1eadn h\u00e0nh.<\/li>\n
    • V\u00f4 hi\u1ec7u h\u00f3a k\u1ebft n\u1ed1i b\u1ecb \u1ea3nh h\u01b0\u1edfng theo h\u01b0\u1edbng d\u1eabn ch\u00ednh th\u1ee9c, thu h\u1ed3i token v\u00e0 x\u00f3a m\u1ecdi th\u00f4ng tin x\u00e1c th\u1ef1c tr\u00e1i ph\u00e9p.<\/li>\n
    • X\u00e1c minh l\u1ea1i kh\u1ea3 n\u0103ng sao l\u01b0u, kh\u00f4i ph\u1ee5c v\u00e0 m\u1ee5c ti\u00eau RPO\/RTO khi d\u1ecbch v\u1ee5 \u0111\u01b0\u1ee3c m\u1edf tr\u1edf l\u1ea1i.<\/li>\n<\/ul>\n

      V\u00ec sao thu h\u1ed3i phi\u00ean ng\u01b0\u1eddi d\u00f9ng l\u00e0 ch\u01b0a \u0111\u1ee7?<\/h2>\n

      Token \u1ee9ng d\u1ee5ng t\u00e1ch bi\u1ec7t v\u1edbi phi\u00ean ng\u01b0\u1eddi d\u00f9ng. Vi\u1ec7c \u0111\u0103ng xu\u1ea5t nh\u00e2n vi\u00ean ho\u1eb7c thu h\u1ed3i phi\u00ean ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng k\u1ebft th\u00fac quy\u1ec1n truy c\u1eadp d\u1ef1a tr\u00ean \u1ee9ng d\u1ee5ng. Todyl c\u1ea3nh b\u00e1o token \u0111\u00e3 ph\u00e1t h\u00e0nh c\u00f3 th\u1ec3 c\u00f2n hi\u1ec7u l\u1ef1c t\u1edbi khi h\u1ebft h\u1ea1n ho\u1eb7c b\u1ecb v\u00f4 hi\u1ec7u h\u00f3a theo c\u01a1 ch\u1ebf ph\u00f9 h\u1ee3p; c\u00e1c th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c c\u1ea5y v\u00e0o danh t\u00ednh kh\u00e1c c\u0169ng c\u1ea7n \u0111\u01b0\u1ee3c t\u00ecm v\u00e0 x\u00f3a ri\u00eang.<\/p>\n

      B\u00e0i h\u1ecdc d\u00e0i h\u1ea1n v\u1ec1 qu\u1ea3n tr\u1ecb danh t\u00ednh m\u00e1y<\/h2>\n

      T\u1ed5 ch\u1ee9c n\u00ean duy tr\u00ec kho ki\u1ec3m k\u00ea \u1ee9ng d\u1ee5ng doanh nghi\u1ec7p, ch\u1ee7 s\u1edf h\u1eefu, quy\u1ec1n \u0111\u01b0\u1ee3c c\u1ea5p, ng\u00e0y s\u1eed d\u1ee5ng g\u1ea7n nh\u1ea5t v\u00e0 m\u1ee5c \u0111\u00edch nghi\u1ec7p v\u1ee5. Quy\u1ec1n \u1ee9ng d\u1ee5ng c\u1ea7n tu\u00e2n th\u1ee7 nguy\u00ean t\u1eafc t\u1ed1i thi\u1ec3u, c\u00f3 th\u1eddi h\u1ea1n r\u00e0 so\u00e1t v\u00e0 \u0111\u01b0\u1ee3c thu h\u1ed3i khi d\u1ecbch v\u1ee5 kh\u00f4ng c\u00f2n s\u1eed d\u1ee5ng. Nh\u1eefng tenant v\u1eabn gi\u1eef quy\u1ec1n cho \u1ee9ng d\u1ee5ng c\u0169 t\u1ea1o ra r\u1ee7i ro t\u1ed3n d\u01b0 kh\u00f3 nh\u00ecn th\u1ea5y.<\/p>\n

      \u0110\u1ed9i b\u1ea3o m\u1eadt c\u0169ng c\u1ea7n c\u1ea3nh b\u00e1o ri\u00eang cho x\u00e1c th\u1ef1c kh\u00f4ng t\u01b0\u01a1ng t\u00e1c, \u00e1p d\u1ee5ng ch\u00ednh s\u00e1ch Conditional Access for workload identities khi ph\u00f9 h\u1ee3p v\u00e0 \u01b0u ti\u00ean ch\u1ee9ng th\u01b0 ho\u1eb7c danh t\u00ednh li\u00ean k\u1ebft thay cho secret d\u00f9ng chung d\u00e0i h\u1ea1n. Nh\u00e0 cung c\u1ea5p SaaS ph\u1ea3i thi\u1ebft k\u1ebf kh\u1ea3 n\u0103ng xoay v\u00f2ng credential, c\u00f4 l\u1eadp t\u1eebng kh\u00e1ch h\u00e0ng v\u00e0 thu h\u1ed3i kh\u1ea9n c\u1ea5p m\u00e0 kh\u00f4ng ph\u1ee5 thu\u1ed9c v\u00e0o thao t\u00e1c th\u1ee7 c\u00f4ng c\u1ee7a h\u00e0ng tr\u0103m tenant.<\/p>\n

      K\u1ebft lu\u1eadn<\/h2>\n

      V\u1ee5 ConnectWise Cloud Backup cho th\u1ea5y ranh gi\u1edbi tin c\u1eady c\u1ee7a Microsoft 365 m\u1edf r\u1ed9ng t\u1edbi m\u1ecdi \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c tenant \u1ee7y quy\u1ec1n. Khi m\u1ed9t danh t\u00ednh \u1ee9ng d\u1ee5ng trung t\u00e2m b\u1ecb x\u00e2m ph\u1ea1m, quy\u1ec1n h\u1ee3p ph\u00e1p c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111\u01b0\u1eddng t\u1ea5n c\u00f4ng xuy\u00ean nhi\u1ec1u kh\u00e1ch h\u00e0ng, trong khi MFA ng\u01b0\u1eddi d\u00f9ng v\u1eabn ho\u1ea1t \u0111\u1ed9ng \u0111\u00fang thi\u1ebft k\u1ebf. Ph\u00f2ng th\u1ee7 hi\u1ec7u qu\u1ea3 \u0111\u00f2i h\u1ecfi qu\u1ea3n tr\u1ecb c\u1ea3 danh t\u00ednh con ng\u01b0\u1eddi l\u1eabn danh t\u00ednh m\u00e1y, c\u00f9ng kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n nhanh thay \u0111\u1ed5i quy\u1ec1n v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c \u1ee9ng d\u1ee5ng.<\/p>\n

      VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb ConnectWise, Microsoft Threat Intelligence, Huntress, Todyl v\u00e0 BleepingComputer<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

      M\u1ed9t th\u00f4ng tin x\u00e1c th\u1ef1c b\u1ecb x\u00e2m ph\u1ea1m trong d\u1ecbch v\u1ee5 ConnectWise Cloud Backup \u0111\u00e3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111\u0103ng nh\u1eadp v\u00e0o h\u00e0ng tr\u0103m tenant Microsoft 365 b\u1eb1ng danh t\u00ednh \u1ee9ng d\u1ee5ng. S\u1ef1 c\u1ed1 l\u00e0 l\u1eddi nh\u1eafc quan tr\u1ecdng: trong m\u00f4i tr\u01b0\u1eddng SaaS, t\u00e0i kho\u1ea3n ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng ph\u1ea3i l\u00e0 danh t\u00ednh duy nh\u1ea5t […]<\/p>\n","protected":false},"author":2,"featured_media":2129,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[89,977,203,978,88,980,979,87],"class_list":["post-2130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-bao-mat-dam-may","tag-connectwise-cloud-backup","tag-microsoft-365","tag-microsoft-entra-id","tag-oauth","tag-quan-tri-danh-tinh","tag-service-principal","tag-tan-cong-chuoi-cung-ung"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=2130"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2130\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/2129"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=2130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=2130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=2130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}