Microsoft's block post goes on about compromised SAML signing certificates but doesn't explain exactly how they fit in to the attach chain. https://blogs.microsoft.com/on-the-issues/2020/12/13/custome...