oauth abuse

ConnectWise Suspends Cloud Backup After Credential Breach

One compromised ConnectWise backup credential opened Microsoft 365 tenants across 162 organisations. Rotating the vendor key is not enough.