Microsoft Falls Victim to Russia-Backed 'Midnight Blizzard' Cyberattack

Microsoft disclosed that the nation-state actor Midnight Blizzard (aka Nobelium/APT29) compromised corporate systems in late November via a password-spray attack, impacting a small percentage of Microsoft corporate email accounts — including senior leadership and security/legal teams — and persisting for over two months; Microsoft pledged a security overhaul of legacy systems and increased cloud logging and monitoring.