Microsoft warns over “active supply chain attack” as ConnectWise 0Auth app compromised
"Follow-on activity included Microsoft Graph API reconnaissance and attempts to add additional credentials on the related service principal in target tenants..."
"Follow-on activity included Microsoft Graph API reconnaissance and attempts to add additional credentials on the related service principal in target tenants..."