Probably a better link would have been the one linked to in the post*: https://karl-voit.at/cloud/ https://karl-voit.at/cloud/ Which has these among a long li

Probably a better link would have been the one linked to in the post*: https://karl-voit.at/cloud/ https://karl-voit.at/cloud/ Which has these among a long list (retaining the reverse order from link above). NB I have just copied and pasted for convenience; neither removed text which refers to links nor added the actual links. You can click through yourself if you want to follow the links. 8<--- 023-08: Again Microsoft, again Azure: "unauthorized access to cross-tenant applications and sensitive data (including but not limited to authentication secrets)". If you aren't tech-savvy: this is very bad. (Source) A reoccuring pattern emerges more and more: Microsoft didn't fix the issue in months and as of 2023-08-03 it is still an open vulnerability in Azure, risking the data of all Azure customers. related: Microsoft comes under blistering criticism for “grossly irresponsible” security | Ars Technica BrianKrebs: "The CEO of Tenable just ripped Microsoft a new on…" - Infosec Exchange 2023-07: Hackers stole a Microsoft Azure Active Directory certificate which gave them full access to basically all Microsoft cloud services including Outlook, Office, SharePoint, Teams, "Login with Microsoft", and so forth. (MS blog entry, Source, German source) With the default logs, customers could not even detect intruders as you would need to pay extra to get access to those log files. Microsoft did not communicate which services were affected and which not. Any Microsoft cloud service was potentially compromised. Most probably, the usual "any compromised system needs to be thrown away and re-created from scratch will not be applied here. As a consequence, you can't trust any data from Microsoft services any more. Security experts like Mike Kuketz think that most probably we need to consider all Microsoft systems that are using their cloud authentication including all Windows hosts are compromised. According to this German source, Microsoft is still refusing to tell what happened and which systems are affected to what extend. 2023-08-18: German comment: Many similar comments like that underline that Microsoft disqualifies as a trustworthy partner. 2023-09-06: first public explanation by MS: Microsoft: Results of Major Technical Investigations for Storm-0558 Key Acquisition Press reactions: heise (German), fefe (German)