Microsoft Struggling to Find How Hackers Steal the Azure AD Signing Key

China’s Storm-0558 hacked 25 organizations, including government agencies, using fake tokens for email access, aiming at espionage since May 15, 2023. However, Storm-0558’s campaign was blocked by Microsoft without affecting other environments. Not only that even, Microsoft also acted promptly by notifying all the targeted customers to secure their systems. Surprisingly, Microsoft remains unaware of […]

The post Microsoft Struggling to Find How Hackers Steal the Azure AD Signing Key appeared first on Cyber Security News.

access azure azure ad blocked campaign china customers cyber-attack cyber security email environments espionage fake find government hacked hackers key may microsoft organizations signing steal storm-0558 tokens