// Microsoft 365HIGH
A threat campaign tracked as Key Eater is exploiting stolen Microsoft Entra ID application credentials to breach Microsoft 365 and Azure environments across 27 organizations since November 1, 2026. Attackers have successfully authenticated into over 33 compromised app registrations across approximately 18 organizations, accessing 2,279 mailbox items and downloading 81 files. Victims span government, energy, agriculture, transportation, engineering, legal, education, and nonprofit sectors. Attackers are also leveraging MSP integrations to amplify exposure across customer tenants.
// Get alerts for Microsoft 365