Russian foreign intelligence hackers gain access to top Microsoft officials, company says

Microsoft disclosed that a hacking unit tied to Russia’s SVR (tracked as Midnight Blizzard / Nobelium / APT29) used a password-spray attack against a legacy, non-production test tenant to access a small percentage of corporate email accounts — including senior leadership and employees in cybersecurity and legal — and exfiltrated some emails and attached documents; the company detected and disrupted the intrusion on Jan. 12 and states there is no evidence of access to customer environments or production systems.