NCSC Advisory: The rise of O365 compromise and how to mitigate

https://www.ncsc.gov.uk/content/files/protected_files/article_files/O365%20Compromise%20and%20mitigation%20advice.pdf