<p>In a major cybersecurity incident, Microsoft’s corporate systems fell victim to a cyberattack orchestrated by a Russian state-sponsored threat actor known as Midnight Blizzard. The breach, which took place in late November last year, went undetected until January. The attacker used a basic password-spray attack to gain access to a small percentage of Microsoft corporate email accounts, including those belonging to senior leadership. Fortunately, there is no evidence to suggest that customer environments or source code were compromised. However, this incident has prompted Microsoft to commit to a complete overhaul of its legacy systems and a significant improvement in cybersecurity measures. In unrelated news, Tietoevry Cloud Hosting recently experienced a ransomware attack, underscoring the growing threat of cyberattacks in today’s digital landscape. Furthermore, experts predict a 24% increase in cybersecurity spending by 2024 as organizations recognize the need to bolster their defenses against these evolving threats.</p>


Collections

Microsoft's corporate systems were breached by a Russia-backed cyberattack called Midnight Blizzard. The attacker accessed some Microsoft corporate email accounts but did not compromise customer environments or source code. Microsoft is now planning a complete overhaul of its legacy systems and improving cybersecurity measures.

Microsoft's Corporate Systems Breached by Russia-Backed 'Midnight Blizzard' Cyberattack