Septu comment: CISA (Cybersecurity and Infrastructure Security Agency) alert regarding “compromised applications in a victim’s Microsoft 365 (M365)/Azure environment” in the wake of the SolarWinds attack:

https://us-cert.cisa.gov/ncas/alerts/aa21-008a