← Back to the boardNews
Attacker abuses Microsoft Entra ID to target downstream MSP clients
Why it’s here: A specialist cybersecurity report on an active credential-abuse campaign hitting US government and energy organizations via MSPs bears on federal cyber policy and supply-chain risk, even without an explicit policy hook.
Trace across the boardItem
11d agoCybersecurity DiveAttacker abuses Microsoft Entra ID to target downstream MSP clientsA lone hacker is abusing stolen Microsoft Entra ID application secrets to breach Microsoft 365 and Azure tenants at MSPs and their downstream clients, according to Todyl's report.1 outletCyber6 linked
Connected
6 links- NewsARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogBoth involve Artex, Microsoft Entra ID, Microsoft 365
- NewsFBI warns ARTEX AI hacking tool is powering global cyberattacksBoth involve Artex, Microsoft 365, Huntress
- NewsHackers enlist Artex to scan GitHub repositories for exposed secretsBoth involve Microsoft Entra ID, Artex
- NewsMidnight Blizzard breach: analysis and best practices | Wiz BlogBoth involve Microsoft Entra ID
- NewsThe Microsoft Outage Is a Warning for the WorldBoth involve Microsoft 365
- NewsMicrosoft outage gives customers a crash course in dependence on RedmondBoth involve Microsoft 365
About
- Artex
- Microsoft Entra ID
- Microsoft 365
- Azure
- Huntress