(guardz.com) Rethinking MSP Security: The Three-Party Shared Responsibility Model in the Wake of Supply Chain Compromises In brief - This article discusses the necessity for Managed Service Providers (MSPs) to move from a two-party to a three-party shared responsibility model to better defend against supply-chain attacks, using the ConnectWise incident as a primary example. Technically - This article outlines a security framework for Microsoft Entra ID environments where responsibility is split between Microsoft (platform), the SaaS vendor (application integrity), and the MSP (tenant governance). It highlights how attackers bypass MFA by leveraging stolen OAuth tokens and harvested application secrets to authenticate as trusted service principals. To mitigate this, the author recommends implementing strict administrative consent workflows, enforcing least-privilege API scopes, and utilizing KQL to monitor ServicePrincipalSignInActivity and AuditLogs within a SIEM/XDR for anomalous non-human identity behavior. Source: https://guardz.com/blog/the-shared-responsibility-model-for-msps/ #Cybersecurity