China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants

China-linked hackers used agentic AI in attack on 2,250 Microsoft 365 tenants

This incident highlights critical risks in granting excessive permissions to third-party software, directly impacting open data security governance. Attackers leveraged existing app credentials to bypass authentication, demonstrating how weak access controls facilitate persistent unauthorized access. Organizations must rigorously audit API permissions to protect sensitive data and maintain trust in open infrastructure.

Source: csoonline.com
Published on 2026-10-23