Microsoft: stolen email became a route to further access

What was reported

Microsoft’s January disclosure traced the intrusion to a legacy test account compromised through password spraying in November 2023. In March, it reported that stolen corporate email information had enabled access to some source-code repositories and internal systems. It also described attackers attempting to use secrets exchanged in email.

Read the report from Microsoft

Read Microsoft’s initial January 2024 disclosure

Our perspective

Our reading: Some context is also a credential. Selecting information for an AI task needs to exclude secrets that could grant further access, while keeping tool permissions independently scoped.

Limits of this connection

This was a corporate intrusion, not a failure of AI memory. The March disclosure updated the earlier investigation; securing identities and secrets requires controls beyond context selection.