🔗 In major gaffe, hacked Microsoft test account was assigned admin privileges | Ars Technica

After compromising the test tenant, Midnight Blizzard used it to create a malicious app and assign it rights to access every email address on Microsoft’s Office 365 email service.

I had to re-read this at least three times to make sure I wasn’t misunderstanding. The scope of this breach is kind of hard to get my head around.