Securing Your Microsoft Environment After the Midnight Blizzard Attack

Originally published by Reco. Written by Oz Wasserman. IntroductionThe attack on Microsoft's SaaS-based Entra environment by Midnight Blizzard (aka Nobelium, Cozy Bear or APT29) was notably one of the most sophisticated attacks seen on similar platforms. This incident, spanning from November 2023 to January 2024, targeted Microsoft's corporate email through a vulnerable Entra test tenant. The lack of Multi-Factor Authentication (MFA) was a key weakness that allowed the attackers unparalleled ...

apt29 attack attacks bear blizzard corporate corporate email cozy bear email entra environment incident january january 2024 microsoft midnight midnight blizzard nobelium november november 2023 platforms reco saas spanning written