CISA has issued an emergency directive in response to Midnight Blizzard, or Cozy Bear, a Russian threat actor targeting Microsoft email accounts. The group is extracting information to access Microsoft customer systems. Strict security measures, including strong passwords and multi-factor authentication, are strongly recommended by CISA for all organizations (Microsoft included).
2 points
I think that zero trust is not enough.
I think that you need to assume that you are going to be compromised and put processes and procedures in place before that happens to ensure business continuity.
6 points
