Microsoft says Storm-2949 targets Microsoft 365 and Azure environments using MFA abuse, password resets, and cloud data theft ...
Storm-2949 is engaged in a "methodical, sophisticated, and multi-layered" campaign ...