Microsoft Entra ID
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Named in breach reports by Cybersecurity DiveAttacker abuses Microsoft Entra ID to target MSP clients
- Named in breach reports by Cyber Security NewsHackers abuse stolen Microsoft Entra ID app credentials to breach 27 organisations
Recent news
Attacker abuses Microsoft Entra ID to target MSP clients
An attacker is abusing Microsoft Entra ID and using valid credentials to gain access to organisations across various sectors. The targets are downstream clients of managed service providers (MSPs).
Hackers abuse stolen Microsoft Entra ID app credentials to breach 27 organisations
An ongoing campaign called Key Eater is abusing stolen Microsoft Entra ID application credentials to access Microsoft 365 and Azure environments. Since 1 November 2026 it has targeted about 45 app registrations and impacted 27 organisations, reached through managed service providers and their downstream clients. Todyl's MXDR team is tracking the activity.