MICROSOFT SAYS: RUSSIAN SOLARWINDS HACKERS HIT U.S. GOVERNMENT AGENCIES AGAIN

Microsoft reports that Nobelium, a Russian state-backed APT linked to the SolarWinds attacks, took control of USAID's email distribution by compromising Constant Contact and sent malicious, code-embedded emails to more than 3,000 recipients across 150+ organizations; the campaign is ongoing and represents a significant supply-chain and network-wide data exfiltration and access risk.