Microsoft reported a breach by Russian group ‘Midnight Blizzard,’ which accessed internal systems and source code using stolen authentication secrets from a January cyberattack. The unauthorized access was facilitated by a compromised non-production test account lacking multi-factor authentication and linked to an OAuth app with elevated privileges. Microsoft is contacting affected customers and has ramped up security measures to counter the persistent threat.

  • rutellthesinful@kbin.social
    link
    fedilink
    arrow-up
    3
    ·
    8 months ago

    wouldn’t the counterpoint to that be all the vulnerabilities that have sat out in the open for years before finally being reported?