Blast Radius of a Backup Credential: What 173 Compromised M365 Tenants Show About Delegated Access

A compromised ConnectWise backup credential exposed 173 Microsoft 365 tenants, revealing how delegated access and OAuth consent turn a single MSP secret into a broad supply-chain blast radius.