Hackers Use Stolen Microsoft Entra ID and Azure DevOps Credentials to Access 27 Organizations

Hackers are abusing stolen Microsoft Entra ID application credentials and Azure DevOps identities to access Microsoft 365 and Azure environments, reaching at least 27 organizations. Todyl’s latest investigation update describes an ongoing campaign targeting managed service providers (MSPs) and their customers since November 1, 2026.

The operator targeted about 45 app registrations across roughly 18…

Abbreviated excerpt as provided by the publisher; the full article is at the canonical source. Attributed to Cyber Security News · Limited verification; verify facts against the linked source. Read the full article on cybersecuritynews.com.

Source published: 04 Nov 2026, 11:15 AM IST. Source facts take precedence over AI interpretation.