threat-intel
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
High
Summary
A massive, automated password spray attack targeting Microsoft's Azure CLI compromised at least 78 Microsoft accounts across 64 organizations. The attack leveraged a deprecated OAuth flow (ROPC) to bypass Conditional Access Policy (CAP) protections, exploiting prevalent password combinations from compromised lists. This highlights vulnerabilities in CAP configurations and the continued risk posed by legacy authentication methods.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data