"US Government Takes Action to Mitigate Russian Hack of Microsoft Email System"

CISA has issued Emergency Directive 24-02 in response to a Russian state-sponsored cyber actor's successful compromise of Microsoft corporate email accounts, requiring Federal Civilian Executive Branch agencies to analyze exfiltrated emails, reset compromised credentials, and secure privileged Microsoft Azure accounts. Other impacted organizations are advised to contact their Microsoft account team, while all organizations are urged to implement stringent security measures such as strong passwords, multifactor authentication, and secure information sharing practices.