Microsoft hit by Storm season – a tale of two semi-zero days sophos.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from sophos.com Daily Mail and Mail on Sunday newspapers.
In a security blog post, Microsoft said a group of Chinese hackers got access to an "inactive MSA consumer signing key" and used it to forge tokens to access Outlook email accounts.
An attack against multiple organizations using the company’s cloud email services, including U.S. government agencies, was “invisible” to many of the victims because they hadn’t paid extra to access security logs. One senator likened the extra costs to “selling a car and then charging extra for seatbelts and airbags."