A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate applications and administration features. [...]
Microsoft Self-Service Password Reset abused in Azure data theft attacks
Résumé + lien vers la source. Sans paywall, sans tracking.