🚨 130,000 devices. One forgotten service account.
A 2024 botnet attack used stale Microsoft 365 accounts with weak passwords—bypassing MFA silently via legacy auth.
If you're not auditing AD service accounts, you're already exposed.
CheckDot is SAFU research on CheckDot
