Stolen Client Secrets: How Attackers Sign In to Entra ID as Your Apps (No Password, No MFA) – Detection & Response Guide
Attackers are signing in to Entra ID as apps using stolen client secrets, with no password or MFA. Check your sign-in logs, hunt with KQL, and lock it down.