HOLY CRAP.
DOGE took root access and got tenant owner Azure privileges (above CIO-level), disabled logging (no record of their actions), downgraded Azure access rules (no 2FA), then data poured out. 15 minutes after the DOGE acct creation, Russian attackers were logging in w/those new credentials.
add a skeleton here at some point
9 months ago