Microsoft warns hackers are exploiting password resets to gain access to user accounts (opens in new tab)

Storm-2949 is engaged in a "methodical, sophisticated, and multi-layered" campaign against Microsoft 365 accounts.