Azure AD Token Forging Technique in Microsoft Attack Extends Beyond Outlook, Wiz Reports

The recent attack against Microsoft's email infrastructure by a Chinese nation-state actor referred to as Storm-0558 is said to have a broader scope than previously thought.
According to cloud security company Wiz, the inactive Microsoft account (MSA) consumer signing key used to forge Azure Active Directory (Azure AD or AAD) tokens to gain illicit access to Outlook Web Access (OWA) and

account active directory actor attack azure azure active directory azure ad beyond chinese cloud cloud security consumer directory email forge infrastructure key microsoft nation nation-state actor outlook reports scope security signing signing key state storm storm-0558 thought token wiz