The Latest Microsoft Midnight Blizzard Breach is a Wakeup Call for SaaS Security

Originally published by Valence. Microsoft recently published new guidance on the nation-state attack that they initially disclosed on January 19. According to Microsoft, the Russian state-sponsored threat actor Midnight Blizzard (also known as NOBELIUM or APT29) was able to leverage a test tenant account and a legacy OAuth application to gain access to corporate email accounts, including members of senior leadership, cybersecurity team, legal team, and others, and exfiltrated some emails and...

account actor apt29 attack blizzard breach call guidance january latest legacy microsoft midnight midnight blizzard nation nation-state attack nobelium russian saas saas security security sponsored state state-sponsored threat actor test threat threat actor valence