Federal government affected by Russian breach of Microsoft

The Cybersecurity and Infrastructure Security Agency issued an emergency directive after Microsoft disclosed a breach by the Russian-linked APT 'Midnight Blizzard' that accessed executive emails and Microsoft source code; CISA is advising federal agencies while Microsoft works with impacted customers to mitigate exfiltrated secrets, and criticism grows about Microsoft’s enterprise security posture following multiple incidents.