Hackers Use Stolen Microsoft Entra ID App Credentials to Breach 27 Organizations
Attackers authenticated as legitimate applications using stolen secrets to hit 27 organizations via MSPs.
65
Victim
27 organizations
- Mentions · 7d0
- Mentions · 30d2
- All mentions2
- First seenNov 4, 2026
- Last mentioned7d ago
Timeline
2 articles · newest firstHackers abuse stolen Entra ID and Azure DevOps credentials to hit 27 organizations
Attackers abused stolen Microsoft Entra ID app credentials and Azure DevOps federated identities to reach 27 MSPs and their customers since November 1, 2026.
75
Appears with
- Todylorganization · 2
- Microsoftvendor · 2
- Entra IDproduct · 2
- Azure DevOpsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.