11-09-2023 03:44 via it.slashdot.org

How a Breached Microsoft Engineer Account Compromised the Email Accounts of US Officials

An anonymous reader shared this report from Bloomberg:China-linked hackers breached the corporate account of a Microsoft engineer and are suspected of using that access to steal a valuable key that enabled the hack of senior U.S. officials' email accounts, the company said in a blog post. The hackers used the key to forge authentication tokens to access email accounts on Microsoft's cloud servers, including those belonging to Commerce Secretary Gina Raimondo, Representative Don Bacon and State D
Read more »