Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data
Summary + source link. No paywalls, no tracking.