← Back to the boardNews
Midnight Blizzard breach: analysis and best practices | Wiz Blog
Why it’s here: Specialist cybersecurity analysis of the Midnight Blizzard breach of Microsoft, a major federal contractor, covering OAuth abuse and detection guidance that bears directly on cybersecurity policy and threat landscape relevant to DC.
Trace across the boardItem
5d agoWiz ResearchMidnight Blizzard breach: analysis and best practices | Wiz BlogWiz Research breaks down how Midnight Blizzard used a compromised legacy test OAuth application to gain mailbox access in Microsoft's corporate tenant and lists detections and hardening steps against similar attacks.1 outletCyber6 linked
Connected
6 links- NewsMicrosoft outage gives customers a crash course in dependence on RedmondBoth involve Microsoft, Exchange Online
- NewsMicrosoft says it "restored service" after major worldwide outageBoth involve Microsoft, Exchange Online
- NewsCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogBoth involve Microsoft, Exchange Online
- NewsMicrosoft says services fully restored after day-long global outageBoth involve Microsoft, Exchange Online
- NewsARTEX in the Wild: Storm-0940 Expands Targeting of IT and Software Vendors | Wiz BlogBoth involve Microsoft, Microsoft Entra ID
- NewsAttacker abuses Microsoft Entra ID to target downstream MSP clientsBoth involve Microsoft Entra ID
About
- Microsoft
- Microsoft Entra ID
- Exchange Online