Microsoft confirmed they were victims of a cyber-attack, and the group claiming responsibility is the same group that went after Nvidia and Samsung. Lapsus$ hacked their way into stealing partial source code for Bing and Cortana.
Microsoft released a lengthy statement. Check out part of it below:
"This week, the actor made public claims that they had gained access to Microsoft and exfiltrated portions of source code. No customer code or data was involved in the observed activities. Our investigation has found a single account had been compromised, granting limited access. Our cybersecurity response teams quickly engaged to remediate the compromised account and prevent further activity. Microsoft does not rely on the secrecy of code as a security measure and viewing source code does not lead to elevation of risk. The tactics DEV-0537 used in this intrusion reflect the tactics and techniques discussed in this blog. Our team was already investigating the compromised account based on threat intelligence when the actor publicly disclosed their intrusion. This public disclosure escalated our action allowing our team to intervene and interrupt the actor mid-operation, limiting broader impact."
Lapsus$ executed a cyberattack on Nvidia and was behind the attack on Samsung, which stole a pretty considerable amount of data.
