Russian state-linked group Midnight Blizzard breached Microsoft using password spraying and a legacy test tenant account, accessing executive emails. No ransomware. Pure espionage. A reminder that identity, not infrastructure, is the primary target.