Federal government affected by Russian breach of Microsoft

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive in response to a significant breach of Microsoft by a Russian hacking group known as Midnight Blizzard. This move comes after the discovery that Russian operatives had accessed emails of senior Microsoft executives and, later, its source code. The directive aims to assist federal agencies in mitigating the risks posed by the breach, emphasizing the collaboration with Microsoft to provide necessary guidance. This incident is part of a pattern of security challenges Microsoft faces, with previous breaches by Russian and Chinese hackers prompting criticism of Microsoft's security and risk management practices. Midnight Blizzard, attributed to Russia's foreign intelligence service and known for high-profile cyberespionage activities, underscores ongoing concerns about cybersecurity at major technology firms.

Opens on CyberScoop