← Back to the boardNews
Compromised Microsoft Key: More Impactful Than We Thought | Wiz Blog
Why it’s here: Original technical research on a Storm-0558 (China-attributed) compromise of a Microsoft identity signing key affecting federal and commercial cloud services, bearing directly on cybersecurity policy, CISA's response, and the threat landscape.
Trace across the boardItem
5d agoWiz ResearchCompromised Microsoft Key: More Impactful Than We Thought | Wiz BlogWiz Research finds the compromised Microsoft MSA signing key could forge tokens for far more Azure AD applications than Microsoft disclosed, and that forged tokens are hard for customers to detect.1 outletCyber33 linked
Connected
28 links- NewsBingBang: How a simple developer mistake could have led to Bing.com takeover | Wiz BlogBoth involve Microsoft, Wiz, Outlook
- NewsStorm-0558 Update: Takeaways from Microsoft's recent report | Wiz BlogBoth involve Microsoft, Wiz, Outlook
- NewsMicrosoft says services fully restored after day-long global outageBoth involve Microsoft, Outlook, Exchange Online
- NewsNovember Patch Tuesday: An Overflowing Cornucopia of CVEsBoth involve Microsoft, Outlook, SharePoint
- NewsMicrosoft says it "restored service" after major worldwide outageBoth involve Microsoft, Outlook, Exchange Online
- NewsMicrosoft’s Patch Tuesday surpasses 1,000 bugs for second month in a rowBoth involve Microsoft, Cybersecurity and Infrastructure Security Agency, Outlook
- NewsOutlook users warned about dangerous flaw that lets hackers hijack email accounts: Act nowBoth involve Microsoft, CISA, Outlook
- NewsMicrosoft fixes over 1,000 vulnerabilities in November Patch TuesdayBoth involve Microsoft, Cybersecurity and Infrastructure Security Agency, Outlook
- NewsMicrosoft outage gives customers a crash course in dependence on RedmondBoth involve Microsoft, Exchange Online
- NewsExploited Outlook Zero-Day Among 1,094 Flaws Patched by MicrosoftBoth involve Microsoft, Outlook
- NewsGerman experts warn against digital dependence after Microsoft outageBoth involve Microsoft, Outlook, SharePoint
- NewsThe SolarWinds Attack | Wiz BlogBoth involve Cybersecurity and Infrastructure Security Agency, Wiz, Azure AD SDK
- NewsNovember 2026 Patch Tuesday: 63 Critical Microsoft fixes, plus an Outlook zero day that allows theft of hashed credentialsBoth involve Microsoft, Outlook
- NewsChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them | Wiz BlogBoth involve Microsoft, Cybersecurity and Infrastructure Security Agency, Wiz
- NewsMidnight Blizzard breach: analysis and best practices | Wiz BlogBoth involve Microsoft, Exchange Online
- NewsThe Microsoft Outage Is a Warning for the WorldBoth involve Microsoft, Outlook
- NewsMicrosoft 365 Crawls Back to Life After a 24-Hour OutageBoth involve Microsoft, Outlook
- NewsCan Europe’s tech firms really replace Amazon, Google and Microsoft?Both involve Microsoft, Outlook
- NewsWiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL | Wiz BlogBoth involve Microsoft, Wiz
- News“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution | Wiz BlogBoth involve Microsoft, Wiz
- NewsBingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover | Wiz BlogBoth involve Microsoft, Wiz
- NewsChaosDB: How we hacked thousands of Azure customers’ databases | Wiz BlogBoth involve Microsoft, Wiz
- NewsTowards a better cloud vulnerability response model | Wiz BlogBoth involve Microsoft, Wiz
- NewsScan for Good: Free AI security tool finds nearly 500 critical flawsBoth involve Cybersecurity and Infrastructure Security Agency, Wiz
- NewsHow we broke the cloud with two lines of code: the full story of ChaosDB | Wiz BlogBoth involve Microsoft, Wiz
- NewsScan for Good: Finding Critical Exposures with AI | Wiz BlogBoth involve CISA, Wiz
- NewsScan for Good: AIを活用した重大な露出の特定 | Wiz ブログBoth involve CISA, Wiz
- NewsMicrosoft CISO urges Artex regulation, but experts say it won’t workBoth involve Microsoft, Wiz
About
- Microsoft
- CISA
- Wiz
- Outlook
- SharePoint
- Exchange Online