Microsoft still unsure how hackers stole MSA key in 2023 Exchange attack

The U.S. Department of Homeland Security's Cyber Safety Review Board (CSRB) has released a scathing report on how Microsoft handled its 2023 Exchange Online attack, warning that the company needs to do better at securing data and be more truthful about how threat actors stole an Azure signing key. [...]

attack azure board csrb cyber cyber safety cyber safety review board data department department of homeland security exchange exchange online hackers homeland security key microsoft msa key report review safety security signing the company threat threat actors u.s. department of homeland security warning