Russian State Hackers Breach Microsoft Network to Access Executive Email Accounts

Microsoft revealed that its systems were breached by Russian hacking group Midnight Blizzard, with a "very small percentage" of corporate emails, including those of senior leadership, being accessed. The attack, which utilized a "password spray" tactic, was detected last week, but the hackers first gained access in late November. Microsoft stated that the breach did not result from a vulnerability in its products or services and that there is no evidence of access to customer environments, production systems, source code, or AI systems. This incident follows previous breaches by other hacking groups, prompting Microsoft to launch the Secure Future Initiative to enhance its cybersecurity protection.