Non-human identity security

Password spraying across more than 5,700 Chilean M365 accounts broke into only seven unused service accounts

Proofpoint says an unknown actor sprayed over 5,700 M365 accounts in Chile and breached only seven, all dormant service accounts at one retailer. Employee logins held, and those seven unused accounts still gave the attacker mail, Teams chats, OneDrive files and, in one case, the Azure portal.