Microsoft still unsure how hackers stole Azure AD signing key

Microsoft says it still doesn't know how Chinese hackers stole an inactive Microsoft account (MSA) consumer signing key used to breach the Exchange Online and Azure AD accounts of two dozen organizations, including government agencies. [...]

account accounts azure azure ad breach chinese chinese hackers consumer exchange exchange online government hackers key microsoft organizations security signing the exchange