For the first time in the history of Microsoft, a cyberattack has left hundreds of executive accounts compromised and caused a major user data leak as Microsoft Azure was attacked.
According to Proofpoint, the hackers use the malicious techniques that were discovered in November 2023. It includes credential theft through phishing methods and cloud account takeover (CTO) which helped the hackers gain access to both Microsoft365 applications as well as OfficeHome.
My school uses MS for a bunch of the logins. 2FA is setup through your phone, which isn’t annoying or anything. So anytime I login, I need my phone handy, and then I have to type in the stupid code into my phone and then a password to approve it and then maybe 25% of the time it decides me clicking “yes this is me” actually means “no, deny!” and boots me out and then I have to authenticate a different way. And if I sign into a different school website that uses the same damn MS login it kicks me from any other school websites I’m currently logged into so I have to log back into them even if they’re still open in another tab and I’m actively working in then. So yeah, I’d like to think I’m smart, but I’d definitely just rush through another MS authentication request because I’m so damn sick of them.