structural:scholar_edition, information:extraction, information:highlighting
Security challenges

On a Friday afternoon in January 2024, Microsoft disclosed that a Russian state-sponsored group hacked into its corporate systems. The group, accessed "a very small percentage" of Microsoft corporate email accounts, which also included members of its senior leadership team and employees in its cybersecurity and legal teams. Microsoft noted in a blog post that the attack might have been prevented if the accounts in question had enabled multi-factor authentication, a defensive measure which is widely recommended in the industry, including by Microsoft itself.