🚨 Security Advisory: Password Spray Attacks Detected

Threat actors are actively performing password spray attacks against Microsoft 365 tenants.

Attack Pattern:

Attempts with common passwords across multiple accounts
Avoids account lockouts
Targets weak credential policies

Mitigation Steps:

Enforce strong password policies
Enable MFA (mandatory)
Monitor sign-in logs (Azure AD / Entra ID)
Implement conditional access policies

Credential security remains a critical defense layer.