Agentic AI tools target downstream tenants using stolen credentials, according to Microsoft researchers.