HPE, Microsoft breach disclosures mark new era of CISO accountability

The report describes sophisticated nation-state espionage by Cozy Bear (Midnight Blizzard) that gained access to Microsoft and HPE cloud-based email environments and earlier SharePoint files, using techniques like password spraying and abuse of a legacy OAuth test application to exfiltrate sensitive information; it also discusses how new SEC disclosure rules and recent enforcement actions (e.g., SolarWinds) are driving more public disclosures and raising CISO accountability, and highlights the broader supply-chain and investor-risk implications.