Microsoft says it was hacked by Russia-linked group

Microsoft announces Russian state-sponsored group APT29, also known as Midnight Blizzard, hacked corporate systems using a password spray attack. The group, linked to Russia’s SVR spy agency, targeted Microsoft to gather information about their operations. Microsoft promptly investigated and disrupted the breach, clarifying that it was not due to any product or service vulnerability. The disclosure follows a new SEC requirement for prompt reporting of cyber incidents. Microsoft’s security practices have faced criticism in the past.