Russian State-Sponsored Hackers Breached US Think Tank Thrice in a Row

In one attack, Dark Halo leveraged a newly disclosed vulnerability for the Microsoft Exchange server that allowed them to bypass multi-factor authentication defenses against unauthorized email access.