Attackers use Microsoft Entra ID credentials to breach MSP client systems

Cybersecurity Dive reports that attackers are using valid Microsoft Entra ID credentials to access organisations across various sectors. The campaign targets managed service provider (MSP) clients, raising concerns about the security of downstream partners.

This matters for banks, insurers and healthcare firms that depend on MSPs for IT services, as attackers could use compromised credentials to access sensitive systems. Reviewing how credentials are managed and how suppliers are granted access is essential to reduce risk.