"US Government Takes Action to Mitigate Russian Hack of Microsoft Email System"
TL;DR
CISA has issued Emergency Directive 24-02 in response to a Russian state-sponsored cyber actor's successful compromise of Microsoft corporate email accounts, requiring Federal Civilian Executive Branch agencies to analyze exfiltrated emails, reset compromised credentials, and secure privileged Microsoft Azure accounts. Other impacted organizations are advised to contact their Microsoft account team, while all organizations are urged to implement stringent security measures such as strong passwords, multifactor authentication, and secure information sharing practices.
Topics:businesscybersecurity#cisa#cybersecurity#emergency-directive#microsoft#nation-state-compromise
- CISA Issues Emergency Directive 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System CISA
- ED 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System CISA
- CISA orders agencies impacted by Microsoft hack to mitigate risks BleepingComputer
- Federal government affected by Russian breach of Microsoft CyberScoop
- US says Russian hackers stole federal government emails during Microsoft cyberattack TechCrunch
Want the full story? Read the original reporting
Read on CISA