What Microsoft's latest email breach says about this IT security heavyweight

Microsoft disclosed that the Russia-linked APT Cozy Bear (aka Midnight Blizzard/Nobelium) breached its network via an older testing environment lacking multi-factor authentication, stealing emails and files from executives and security/legal staff; the intrusion occurred in late November 2023 and was detected on January 12, 2024. Microsoft warned of potential disruption while remediating legacy systems, and reports indicate Hewlett Packard Enterprise was also targeted; the incident follows prior high-impact intrusions involving the same threat actor and raises oversight and cloud-security concerns.