When Microsoft explained to their customers: "Storm-0558 acquired an inactive MSA consumer signing key"[1] They should have said: "Storm-0558 acquired an EXP

When Microsoft explained to their customers: "Storm-0558 acquired an inactive MSA consumer signing key"[1] They should have said: "Storm-0558 acquired an EXPIRED MSA consumer signing key" And when they said: "a validation issue allowed this key to be trusted for signing Azure AD tokens."[1] They should have said: "MULTIPLE validation issues allowed this key to be trusted for signing Azure AD tokens." And when Microsoft said: "The actors are keenly aware of the target’s environment, logging policies, authentication requirements, policies, and procedures." They should have said something like: "The actors could have been aiming for a brazen hit-and-run and didn't stop for a second to think about policies and other nonsense. Alternatively, the actors were unsophisticated and completely unaware of facts like the US State Department paying us a stack more money for the privilege of being able to log mailbox access events in detail (thanks Boeing for the tip from MCAS!). Additionally, the actors appear to have neglected the fact that Chrome 92 was last updated in 2021 and therefore a fairly bad choice of user agent to use for an attack against a US department whose ICT systems should be using the latest version of web browsers. Additionally, the actors likely had no idea how US State Department mailboxes are accessed, and made a very poor guess of it by using random public data centres throughout Europe."[2][3] [1] https://www.microsoft.com/en-us/security/blog/2023/07/14/analysis-of-storm-0558-techniques-for-unauthorized-email-access/ https://www.microsoft.com/en-us/security/blog/2023/07/14/ana... [2] https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-193a https://www.cisa.gov/news-events/cybersecurity-advisories/aa... [3] https://www.theguardian.com/us-news/2023/jul/20/ambassador-to-beijing-among-us-officials-hit-by-chinese-hackers https://www.theguardian.com/us-news/2023/jul/20/ambassador-t...