258

For the first time in the history of Microsoft, a cyberattack has left hundreds of executive accounts compromised and caused a major user data leak as Microsoft Azure was attacked.

According to Proofpoint, the hackers use the malicious techniques that were discovered in November 2023. It includes credential theft through phishing methods and cloud account takeover (CTO) which helped the hackers gain access to both Microsoft365 applications as well as OfficeHome.

you are viewing a single comment's thread
view the rest of the comments
[-] Rentlar@lemmy.ca 38 points 10 months ago

bing bing bing bing!

"Sign into your Microsoft account" here...

"Link your Microsoft account to Edge/[Insert MS product here]"

"Let's get you signed in" there.

"Try our Windows Hello! A new method of accessing your Microsoft account!" over there.

"Sorry you can't use your organization account here, sign into your personal account"

This is the monster Microsoft unleashed upon itself.

[-] BeardedSingleMalt@kbin.social 16 points 10 months ago

Microsoft, and all the cybersecurity folks who blindly accept any recommendation from third party firms.

When we need to remote in to our work PCs we have to use our Microsoft account with MFA just to access the remote connections, then use the same credentials to access the pool, then if we want to RDP into our PC we use the same credentials.

this post was submitted on 19 Feb 2024
258 points (97.4% liked)

Cybersecurity

5846 readers
86 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS