The Microsoft Account (MSA) signature service has been migrated to Azure confidential virtual machines (VMs), and the Entra ID signing service is currently undergoing a migration, according to a Monday announcement from Microsoft.
About seven months prior, the tech giant announced that it had finished updating Microsoft Entra ID and MS for both public and US government clouds to use the Azure Managed Hardware Security Module (HSM) service to generate, store, and automatically rotate access token signing keys.
The attack paths that we believe the attacker employed in the 2023 Storm-0558 attack against Microsoft are lessened by each of these enhancements. In a piece provided with The Hacker News prior to publication, Microsoft Security Executive Vice President Charlie Bell stated.
Additionally, Microsoft reported that 92% of employee productivity accounts now use phishing-resistant multifactor authentication (MFA) to reduce the risk of sophisticated cyberattacks read more about Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.