
Microsoft Cloud Exploit Review by DHS’s Cyber Safety Review Board Reveals Urgent Need for Security Overhaul
In May and June 2023, a China-linked cyber threat actor group, motivated by espionage, breached Microsoft’s cloud services using authentication tokens that were signed by a key which Microsoft had created in 2016. The breach resulted in the compromise of Microsoft Exchange Online mailboxes belonging to 22 organizations and over…