An unauthorized access attempt was detected using a compromised certificate. APT29 is leveraging a stolen Mimecast certificate to gain initial access to Microsoft 365 environments, indicative of a supply chain attack vector.