Microsoft Self-Service Password Reset abused in Azure data theft attacks
…Microsoft tracks the actor as Storm-2949 and says that the purpose of the attacks is "to exfiltrate as much sensitive data from a target organization’s high-value assets as possible…