Microsoft says Russian hackers breached its systems, accessed source code

5 weeks ago: "the threat actor used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts [cough like the CEO and security teams]... To date, there is no evidence that the threat actor had any access to customer environments, production systems, source code, or AI systems."

Now: "This has included access to some of the company's source code repositories and internal systems. To date we have found no evidence that Microsoft-hosted customer-facing systems have been compromised.

It is apparent that Midnight Blizzard is attempting to use secrets of different types it has found. Some of these secrets were shared between customers and Microsoft in email, and as we discover them in our exfiltrated email, we have been and are reaching out to these customers to assist them in taking mitigating measures"

The constant downplaying at every stage puts a bad taste in the mouth. Three weeks from now we'll probably be talking about how "a small number of customer accounts have been compromised"

yborg said it right: https://news.ycombinator.com/item?id=39063441

From the source: https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-...

Is my count correct, with this making the 3rd time Microsoft have been significantly compromised in the last ~12 months?

Microsoft has had some of the most atrocious security incidents of all major cloud providers and it doesn't seem to slow them down at all.