Microsoft: Office 365 Was Not SolarWinds Initial Attack Vector
Get Permission Microsoft's security team says the company's Office 365 suite of products did not serve as an initial entry point for the hackers who waged the SolarWinds supply chain attack. And SolarWinds' CEO, in a new blog, says the company "has not identified a specific vulnerability in Office 365 that would have allowed the threat actor to enter our environment." The incident, he says, involved the compromise of an email account through the theft of credentials. Microsoft also points to credential theft. "In our investigations to date, data hosted in Microsoft services - including emai...
Source: bankinfosecurity.com