Security · 2h ago
Massive Password Spray Attack Hits Azure CLI, 78 Accounts Breached
A large-scale password spray attack targeting Microsoft's Azure CLI compromised at least 78 accounts out of over 81 million attempts. The campaign, active from June 12-26, originates from an IPv6 range controlled by LSHIY LLC. Huntress researchers warn the attack is ongoing and automated.
Meridian48 take
The attack's scale underscores the persistent risk of credential-based attacks on cloud infrastructure, even with basic security measures like MFA.
Read the full reporting
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts →
The Hacker News
azure-clipassword-spray