Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

This article details two nation-state SaaS breaches — Microsoft’s Midnight Blizzard (APT29) and the Cloudflare-Atlassian incident — where attackers exploited password spraying, compromised OAuth tokens, and stale credentials to escalate privileges, maintain persistence via malicious OAuth apps, and exfiltrate sensitive data (senior staff emails and multiple source code repositories); it stresses the importance of continuous SaaS monitoring, strict identity/OAuth controls, and SaaS Security Posture Management.