🧰 Microsoft Graph

The items that name it 6

• AI, Scripts, Operator: Inside the ConnectWise Attack
  writeupas affected products2026-10-26It is written here as Microsoft Graph (Graph reads not recorded in the Entra audit log; Graph activity logging not enabled at known victims).

  Graph reads not recorded in the Entra audit log; Graph activity logging not enabled at known victims

• M365 Token Spray and Replay Campaign Compromises Business Email Accounts
  writeupas affected products2026-10-22
• ConnectWise Suspends Cloud Services in Response to Cyberattack
  articleas affected products2026-10-19It is written here as Microsoft Graph (tokens obtained in customer tenants).

  tokens obtained in customer tenants

• The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
  articleas affected products2026-10-14It is written here as Microsoft Graph (permissions including AppCatalog.ReadWrite.All granted via PnP Management Shell service principal).

  permissions including AppCatalog.ReadWrite.All granted via PnP Management Shell service principal

• Passkey-themed social engineering leads to identity and cloud compromise
  writeupas classification.technologies2026-09-09
• Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
  articleas tools

  API used by Antino to interact with Outlook and OneDrive for its native C2 channel.