Interesting read

I found this in my email this morning and it sounds really scary what do members think of this?

Sound like MS is running some scare tactics, and offering themselves as the solution...

To preclude this variety of attacks, Microsoft suggested these tips:

• Enforce strong multifactor authentication policies by using hardware security keys, passwordless sign-in and password expiration rules and deactivating unused accounts.
• Turn on attack surface reduction rules to block or audit activities associated with this threat.
• Enable Protective Process Light for LSASS on Windows 11 devices. New enterprise-joined Windows 11 (22H2 update) installs have this feature enabled by default, per the company.
• Enable Windows Defender Credential Guard, which is turned on by default for organizations using the Enterprise edition of Windows 11.
• Turn on cloud-delivered protection in Microsoft Defender Antivirus.
• Run endpoint detection and response in block mode so Microsoft Defender for Endpoint can block malicious artifacts.

Click to expand...

Color me skeptical. :/
I am dubious that Microsoft would be a corporation or governments first choice against state threat actors.

The article on Reuters linked below states this:

"Microsoft qualified its assessment as "moderate confidence," intelligence jargon that typically means a theory is plausible and credibly sourced but has yet to be fully corroborated."

Yes I suppose I took it at face value and I don't like these sorts of stuff coming into my email.