In January 2024, nation-state actor Midnight Blizzard exploited Microsoft misconfigurations in password spray attacks that successfully compromised an account without multifactor authentication ...