Microsoft Defender

Microsoft: Storm-0501 Shifts to Cloud-Native Ransomware, Wipes Azure Data

Microsoft details how identity sync abuse granted Global Admin control.