Microsoft’s employees’ computers were hacked after they visited a third-party website devoted to iOS development. The attacks targeted a zero-day vulnerability in the Java browser plug-in that’s since been patched by Oracle. Attackers first compromised the popular iPhoneDevSDK website, without tipping off the site’s administrator, and then used the site to launch drive-by attacks against anyone who visited. Microsoft’s public statement suggests that many more than just those four businesses may have been successfully compromised by attackers.”]
Source: https://www.darkreading.com/attacks-breaches/microsoft-hacked-joins-apple-facebook-twitter