Attacker abuses Microsoft Entra ID to target downstream MSP clients

An attacker has been abusing Microsoft Entra ID, using valid credentials, to target the downstream clients of managed service providers, Cybersecurity Dive reports. The campaign has gained access to organizations across various sectors.