Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/

by RadixDLT • 2 years ago

21 5 2 years ago

msrc.microsoft.com

EAtmULFO• 2 years ago

Knew the full extent of the attack and exfiltrated data, yet took no action to re-secure systems that could be exploited using this information. Negligence?

hulitu• 2 years ago

Negligence?

No. Just Microsoft. They take security seriously, only when there is a major worm ravaging their customers.

Reubend• 2 years ago

In recent weeks, we have seen evidence that Midnight Blizzard is using information initially exfiltrated from our corporate email systems to gain, or attempt to gain, unauthorized access. This has included access to some of the company’s source code repositories and internal systems. To date we have found no evidence that Microsoft-hosted customer-facing systems have been compromised.

It would certainly be nice to know which of things they "gained" access to, versus which of them they "attempted to gain" access to. The fact that this blog post doesn't specify makes me assume the worst case scenario: that the attackers got a decent amount of source code to comb through for more vulnerabilities in the future.

entropyie• 2 years ago

I thought Russia was a multi-national state, not a nation state.

yogorenapan• 2 years ago

Anywhere know where I might be able to find the leaked source code? Might be useful as reference

Microsoft Actions Following Attack by Nation State Actor Midnight Blizzard

Related Stories