Cybersecurity
US Warns Agencies of Possible Breach Via Microsoft Hack
- Agencies urged to reset credentials, secure cloud accounts
- State-sponsored incident is ‘grave’ risk for agencies, US says
This article is for subscribers only.
US federal agencies were ordered to analyze emails, reset compromised credentials and work to secure Microsoft Corp. cloud accounts amid concerns that a Russian nation-state hacking group may have accessed some correspondence.
The directive from the US Cybersecurity and Infrastructure Security Agency, known as CISA, came in response to breach of Microsoft that the tech giant disclosed in January. A Russian state-sponsored group called Midnight Blizzard was accused of exfiltrating data from Microsoft and using it to try compromise some of the company’s customers, according to the CISA alert. That includes correspondence between federal agencies and Microsoft, according to CISA.