Key Eater: Stolen Entra ID App Credentials Walk Into MSP Clients

One operator, about 45 stolen app secrets, 27 organizations reached, and a Conditional Access block that does not cover multi-tenant apps