
Blast Radius of a Backup Credential: What 173 Compromised M365 Tenants Show About Delegated Access
pr0h0•
microsoft-365supply-chainoauthbackupmsp




A compromised ConnectWise backup credential exposed 173 Microsoft 365 tenants, revealing how delegated access and OAuth consent turn a single MSP secret into a broad supply-chain blast radius.