CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits

CISA issued an emergency directive in response to Midnight Blizzard (Cozy Bear), a Russian state-sponsored group that used Microsoft 365 password-spray attacks to exfiltrate Microsoft corporate email and customer correspondence; federal agencies were ordered to investigate affected accounts, reset compromised credentials, secure privileged Azure accounts, and organizations are urged to enforce strong passwords and multifactor authentication.