Microsoft tells yet more customers their emails have been stolen

A weekly infosec roundup reports that Russian and Chinese state-linked actors accessed and exfiltrated Microsoft corporate emails and source code (Midnight Blizzard), while multiple critical vulnerabilities (including CVSS 9.1 and 10.0 issues) affecting IP cameras, industrial/SCADA systems and CAD license servers were disclosed; a major cyber incident at CDK disrupted dealer management services for thousands of US car dealerships, researchers published the SnailLoad timing inference exploit, phishing impersonation trends favor Facebook/Meta, and other product security failures (Rabbit R1 hardcoded API keys) and EU sanctions on cyber attackers were noted.