Microsoft warns hackers are exploiting password resets to gain access to user accounts

Storm-2949 is engaged in a "methodical, sophisticated, and multi-layered" campaign ...