security: How Storm-2949 turned a compromised identity into a cloud-wide breach

Microsoft describes how Storm-2949 used stolen credentials to move from identity compromise to broad cloud data theft without malware. The incident highlights abuse of trusted systems and the difficulty of detecting activity that stays within normal cloud authentication flows.

• Source: Microsoft Security Blog