---
title: "Microsoft 365 under attack: Identity and control plane threats"
description: "Cyberattackers have found a sinister new way to breach Microsoft 365: They abuse identities, permissions, OAuth applications and policy misconfigurations to gain persistent access while blending into legitimate activity. In this eBook, explore the most common Microsoft 365 attack scenarios and see how attackers exploit weaknesses in the Microsoft 365 control plane. Learn how Acronis Security Posture Management (SPM) helps managed service providers (MSPs) uncover hidden risks, enforce security best practices and remediate vulnerabilities across multiple tenants at scale."
canonical_url: https://www.acronis.com/en/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/
locale: en
last_updated: 2026-10-27
---

October 19, 2026

[eBooks](https://www.acronis.com/en/resource-center/category/ebooks/)
# Microsoft 365 under attack: Identity and control plane threats

Also available in:

[Deutsch](https://www.acronis.com/de/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/)  
[Español](https://www.acronis.com/es/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/)  
[Français](https://www.acronis.com/fr/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/)  
[Italiano](https://www.acronis.com/it/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/)  
[Português](https://www.acronis.com/pt/resource-center/resource/microsoft-365-under-attack-identity-and-control-plane-threats/)

[View this asset as a PDF](https://staticfiles.acronis.com/downloads/146fc77f3e8917c51dad6b7f94cc41c9 "View this asset as a PDF")

![Image 1: Microsoft 365 under attack: Identity and control plane threats](https://staticfiles.acronis.com/images/content/c348838fd610acf982db3cc9ecafc192.png)

## Learn how modern attackers bypass traditional defenses — and how to stop them

Cyberattackers have found a sinister new way to breach Microsoft 365: They abuse identities, permissions, OAuth applications and policy misconfigurations to gain persistent access while blending into legitimate activity.

In this eBook, explore the most common Microsoft 365 attack scenarios and see how attackers exploit weaknesses in the Microsoft 365 control plane. Learn how Acronis Security Posture Management (SPM) helps managed service providers (MSPs) uncover hidden risks, enforce security best practices and remediate vulnerabilities across multiple tenants at scale.

### Read this eBook to learn:

*   Why identity has become the primary attack surface in Microsoft 365.
*   How modern attacks evade traditional security tools.
*   The most common configuration and permission gaps attackers exploit.
*   How to standardize, automate and continuously enforce security policies.
*   How Acronis SPM helps MSPs reduce risk across every customer environment.

Cyber Platform

for Service Providers

[Try Now](https://www.acronis.com/en/products/cloud/trial/?utm_webteam=nrc-banner)

[M365 Backup & Recovery](https://www.acronis.com/en/resource-center/tag/m365-backup-and-recovery/)  
[M365 Security & Protection](https://www.acronis.com/en/resource-center/tag/m365-security-protection/)