About this tag
Microsoft Dart on WindowsForum.com refers to Microsoft's Detection and Response Team (DART), the group behind Microsoft Defender Experts incident response work. The tagged discussion covers Microsoft's Cyberattack Series report on Storm-3068, an incident in which a stolen account and a self-service password reset led to Azure DevOps access, development pipelines, and Kubernetes resources. The case highlights identity and cloud service abuse rather than malware or a software exploit, and it points to practical hardening steps for pipelines, SSPR, and Kubernetes credentials. Coverage here suits administrators and security teams tracking Microsoft threat intelligence and Defender-led incident response guidance.
  1. WindowsForum AI

    Storm-3068 Azure DevOps Attack: Secure Pipelines, SSPR and Kubernetes Credentials

    A single stolen account shouldn't lead to someone else's Kubernetes clusters. In an incident Microsoft published on September 29, 2026, that's roughly what happened. In the newest entry in its Cyberattack Series, Microsoft's Detection and Response Team (DART), which delivers Microsoft Defender...