DIRS.INFO The most relevant business & tech news

☆ Hackers from China and Russia are finding cracks in Microsoft's security
▼ + stars: | 2024-04-12 | by ( Grace Eliza Goodwin | ) www.businessinsider.com time to read: +4 min

download the appSign up to get the inside scoop on today’s biggest stories in markets, tech, and business — delivered daily. Read previewChina and Russia keep finding ways to get past Microsoft's security systems. Advertisement"Midnight Blizzard's successful compromise of Microsoft corporate email accounts and the exfiltration of correspondence between agencies and Microsoft presents a grave and unacceptable risk to agencies," CISA wrote in its emergency directive. AdvertisementLast week, the US Department of Homeland Security released a report from the Cyber Safety Review Board (CSRB) detailing a "cascade" of "avoidable errors" in the company's security systems. A Microsoft spokesperson told BI of the latest Russian attack: "As we discover secrets in our exfiltrated email, we are working with our customers to help them investigate and mitigate.

Persons: —, CISA, Jen Organizations: Service, Infrastructure Security Agency, Microsoft, Business, Blizzard, Midnight Blizzard, US Department of Homeland Security Locations: China, Russia, Russian, U.S

☆ Microsoft says a Russian hacking group is still trying to crack into its systems
▼ + stars: | 2024-03-08 | by ( Sophie Kiderlin | In | ) www.cnbc.com time to read: +1 min

Microsoft on Friday said that Russian group Nobelium, which the company refers to as Midnight Blizzard, has been trying to access its internal systems and source code repositories. "In recent weeks, we have seen evidence that Midnight Blizzard is using information initially exfiltrated from our corporate email systems to gain, or attempt to gain, unauthorized access. This has included access to some of the company's source code repositories and internal systems," Microsoft said in a blogpost. "To date we have found no evidence that Microsoft-hosted customer-facing systems have been compromised." Microsoft said Midnight Blizzard was trying to access secrets, including those shared between Microsoft and its customers, but that it was reaching out and helping affected customers.

Persons: Blizzard Organizations: Microsoft, Midnight

☆ Biden 'determined' not to deploy U.S. troops to Ukraine; Chinese delegation meets in Kyiv
▼ + stars: | 2024-03-08 | by ( Natasha Turak | ) www.cnbc.com time to read: +1 min

Microsoft on Friday said that Russian group Nobelium, which the company refers to as Midnight Blizzard, has been trying to access its internal systems and source code repositories. "In recent weeks, we have seen evidence that Midnight Blizzard is using information initially exfiltrated from our corporate email systems to gain, or attempt to gain, unauthorized access. This has included access to some of the company's source code repositories and internal systems," Microsoft said in a blog post. Microsoft said Midnight Blizzard was trying to access secrets, including those shared between Microsoft and its customers, but that it was reaching out and helping affected customers. Microsoft first said in January that it had detected a cyberattack from Nobelium, which saw the Russian group hack emails from top executives.

Persons: Blizzard, — Sophie Kiderlin Organizations: Microsoft, Midnight Locations: Nobelium, Russian

☆ HPE hacked by same Russian intelligence group that hit Microsoft
▼ + stars: | 2024-01-24 | by ( Jonathan Vanian | In | ) www.cnbc.com time to read: +2 min

Antonio Neri, president and chief executive officer of Hewitt Packerd Enterprise (HPE), speaks during the HPE Discovery CIO Summit in Las Vegas, Nevada, U.S., on Tuesday, June 19, 2018. HPE said that it is still investigating the hack, which it believes was related to another incident that occurred in June 2023. During that event, the hackers managed to compromise "a limited number of SharePoint files as early as May 2023," HPE wrote in the filing. "Upon undertaking such actions, we determined that such activity did not materially impact the Company." In 2020, this same Russian intelligence-linked hacking group also conducted the infamous breach of government supplier SolarWinds.

Persons: Antonio Neri, Hewitt, Bridget Bennett, Bear, HPE Organizations: Enterprise, Bloomberg, Getty, Hewlett Packard Enterprise, Microsoft, SolarWinds Locations: Las Vegas , Nevada, U.S, Russian

☆ CrowdStrike CEO talks Microsoft's security breach and explains why Russian hackers are hard to beat
▼ + stars: | 2024-01-22 | by ( Julie Coleman | ) www.cnbc.com time to read: +2 min

In a Monday interview with CNBC's Jim Cramer, CrowdStrike CEO George Kurtz discussed Microsoft 's high-profile security breach by a Russian intelligence group, saying these adversaries have a determined "low and slow" approach to hacking that's especially tough to beat. Thought to be part of the Russian foreign intelligence service SVR, Nobelium is also known as Midnight Blizzard and Cozy Bear. Nobelium has tried to breach the systems of U.S. allies as well as the Department of Defense. He said CrowdStrike uses its algorithms to string together these "low signals" and identify such adversaries. Kurtz added that CrowdStrike has been able to stop the group in the past, saying that some of Microsoft's customers seek additional support from his company.

Persons: CNBC's Jim Cramer, George Kurtz, Cozy Bear, Kurtz, it's, Nobelium, CrowdStrike Organizations: Microsoft, Nobelium, Midnight, Cozy, Department of Defense, SolarWinds Locations: Russian, U.S, China

☆ Microsoft says Russian hackers attacked it to find information about themselves
▼ + stars: | 2024-01-20 | by ( Lakshmi Varanasi | ) www.businessinsider.com time to read: +3 min

Microsoft said on Friday that its security systems were breached by a Russian hacking group. Microsoft identified the group as Midnight Blizzard, which was behind the SolarWinds cyberattack. AdvertisementMicrosoft said Friday that its systems were breached by Russian hackers who accessed a "very small percentage" of corporate email accounts. The attack was launched by Midnight Blizzard — the seasoned Russian hacking group behind the massive 2020 attack on US information technology firm SolarWinds, which exposed sensitive information in the US federal government. But federal investigators said they found evidence the hackers accessed Microsoft Office 365.

Persons: — Organizations: Microsoft, Midnight, Service, Midnight Blizzard, Initiative Locations: Russian, China

☆ Microsoft says Russian hacking group accessed email accounts of senior leaders
▼ + stars: | 2024-01-19 | by ( Catherine Thorbecke | ) edition.cnn.com time to read: +2 min

CNN —A Russian hacking group gained access to some email accounts of Microsoft senior leaders, the software giant disclosed in a regulatory filing Friday afternoon. “Microsoft has identified the threat actor as Midnight Blizzard, the Russian state-sponsored actor also known as Nobelium.”Nobelium, notably, is the same group responsible for the infamous SolarWinds breach back in 2020. Microsoft said it is in the process of notifying employees whose email was accessed. There is currently no evidence that the hackers had any access to customer environments or AI systems, Microsoft said. Microsoft systems have been the target of multiple recent high-profile hacking efforts.

Persons: ” Nobelium, SolarWinds, — Organizations: CNN, Microsoft, Midnight Blizzard, Hackers, Midnight, Federal Bureau of Investigation, Infrastructure Security Agency Locations: Russian

Microsoft said in a Friday regulatory filing that a Russian intelligence group accessed some of the software maker's top executives' email accounts. The company said a group called Nobelium carried out the attack, which it detected last week. Microsoft and the U.S. government consider Nobelium to be a part of the Russian foreign intelligence service SVR. The hacking group was responsible for one of the most prolific breaches in U.S. history, when it breached government supplier SolarWinds in 2020. It was also implicated alongside another Russian hacking group in the 2016 breach of the Democratic National Committee's systems.

Persons: Amy Hood, Brad Smith, Satya Nadella, Nobelium Organizations: Microsoft, Infrastructure Security Agency, U.S, SolarWinds, Department of Defense, Democratic National Locations: Russian, U.S

It said the same highly skilled Russian hacking team behind the SolarWinds breach was responsible. “A very small percentage” of Microsoft corporate accounts were accessed, the company said, and some emails and attached documents were stolen. A company spokesperson said Microsoft had no immediate comment on which or how many members of its senior leadership had their email accounts breached. In a regulatory filing Friday, Microsoft said it was able to remove the hackers' access from the compromised accounts on or about Jan. 13. After gaining a foothold, they used the account's permissions to access the accounts of the senior leadership team and others.

Persons: “ Organizations: BOSTON, —, Microsoft, . Securities, Exchange, SEC, Google, Cozy, Justice, Treasury Locations: — State, Russian, Redmond , Washington, U.S, Europe

☆ Microsoft says Russia-linked hackers behind dozens of Teams phishing attacks
▼ + stars: | 2023-08-03 | by ( Zeba Siddiqui | ) www.reuters.com time to read: +3 min

Microsoft Teams app is seen on the smartphone placed on the keyboard in this illustration taken, July 26, 2021. REUTERS/Dado Ruvic/File PhotoSAN FRANCISCO, Aug 2 (Reuters) - A Russian government-linked hacking group took aim at dozens of global organizations with a campaign to steal login credentials by engaging users in Microsoft Teams chats pretending to be from technical support, Microsoft researchers said on Wednesday. These "highly targeted" social engineering attacks have affected "fewer than 40 unique global organizations" since late May, Microsoft researchers said in a blog, adding that the company was investigating. The hackers used already-compromised Microsoft 365 accounts owned by small businesses to make new domains that appeared to be technical support entities and had the word "microsoft" in them, according to details in the Microsoft blog. Accounts tied to these domains then sent phishing messages to bait people via Teams, the researchers said.

Persons: Dado, Washington didn't, Midnight Blizzard, Zeba Siddiqui, Gerry Doyle Organizations: Microsoft, REUTERS, FRANCISCO, Midnight, Thomson Locations: Russian, Washington, Russia, U.S, Europe, San Francisco

Search resuls for: "Midnight Blizzard"

10 mentions found