In December, a group of threat actors abused the Microsoft “certified publishers” status of the Microsoft Cloud Partner Program (MCPP). They were able to obtain broad permission to access...