Proofpoint linked 28 Microsoft 365 tenant intrusions to unrotated service accounts still holding default passwords.
Huntress researchers observed a password spraying campaign that used valid credentials from past breaches and an OAuth flaw to compromise…