During the Celtic year of Windows 23H2, cyber vampires stole health records, tapped mail, and had cryptocurrency transfers signed. Just when it looked like it would be quiet for a while, security software sent millions of computers to the blue death. So this year, there was no need to wait for an attacker, sometimes it was enough to wait for an update.
In November 2023, Russian intelligence penetrated the company’s Microsoftu network. By testing common passwords, it took control of an old test account that did not have multi-factor authentication. Through the authorizations of the OAuth application, it reached the mail of management and security personnel. The attack was discovered in January. In the spring, the US agency CISA had already warned against the misuse of stolen government correspondence for further intrusions.