Midnight Blizzard breaches Microsoft corporate email ยท updates https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach Russia's Midnight Blizzard (APT29) password-sprayed a legacy, non-production Microsoft test tenant without MFA, then abused an OAuth app to read email of Microsoft senior leadership and security staff. Microsoft detected the attack on 2024-01-12. Stolen emails included correspondence with US federal agencies, so CISA issued Emergency Directive 24-02 ordering agencies to analyze the exposed emails and reset any compromised credentials. en Tue, 02 Apr 2024 00:00:00 GMT Midnight Blizzard breaches Microsoft corporate email: CISA issues Emergency Directive 24-02 for agencies whose email with Microsoft was exposed https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach#2024-04-02-774e7c87 Tue, 02 Apr 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/news-events/directives/ed-24-02-mitigating-significant-risk-nation-state-compromise-microsoft-corporate-email-system">Source</a></p> Midnight Blizzard breaches Microsoft corporate email: Microsoft publishes guidance for responders on the Midnight Blizzard attack https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach#2024-01-25-1080729e Thu, 25 Jan 2024 00:00:00 GMT high <p><a href="https://www.microsoft.com/en-us/security/blog/2024/01/25/midnight-blizzard-guidance-for-responders-on-nation-state-attack/">Source</a></p> Midnight Blizzard breaches Microsoft corporate email: Microsoft detects a nation-state attack on its corporate systems https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach https://pwn.watch/i/microsoft-midnight-blizzard-corporate-email-breach#2024-01-12-5c5fdf9d Fri, 12 Jan 2024 00:00:00 GMT high <p><a href="https://www.microsoft.com/en-us/security/blog/2024/01/25/midnight-blizzard-guidance-for-responders-on-nation-state-attack/">Source</a></p>