https://shitposter.world/notice/AqYhMDHbSv5ha97xnU

Yeah, even field IT was training to use Azure cloud at $FORMER_EMPLOYER. I recall seeing that one of the penetrations against Microsoft potentially exposed credentials that would have allowed them to issue admin credentials against any domain (not sure whether it was regular Active Directory or Azure Active Directory) in the world.

The right response would have been to burn down their existing networks ... and all other Microsoft networks worldwide ... to start over from scratch. But since there was no known misuse, it was assumed that this was unnecessary.