Microsoft Publishes Midnight Blizzard Response Guidance Addressing Follow-On Risks After Corporate Environment Breach

In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard ^[1]. The company explained that the threat actor had accessed its corporate environment and could leverage information obtained to launch follow-on attacks against customers ^[1]. Microsoft advised customers to audit anomalous application consents, email forwarding rules, and advanced phishing activity ^[1].

Industries mainly affected: Technology, Cross-industry

Microsoft advised customers to audit anomalous application consents, email forwarding rules, and advanced phishing activity ^[1].