MICROSOFT BREACH — WHAT HAPPENED? WHAT SHOULD AZURE ADMINS DO?

Summary from the TLDR InfoSec newsletter

This article covers the sequence of events that led to the Microsoft breach disclosed on January 25, 2024. The article contains diagrams that describe the flow of events as well as information about the breached systems. It also provides detailed instructions for identifying and investigating these applications using the Azure portal.