Cybercriminals are being referred to as "auditors" that organizations never hired, suggesting they are exploiting vulnerabilities. The issue appears to be related to cybersecurity, with various factors such as supply chain dependencies and identity management being relevant. However, the exact nature and scope of the threat posed by these "auditors" is unclear.