CISA’s emergency directive on April 2 mandates US federal agencies to secure Microsoft Corp cloud accounts, analyze emails, and reset compromised credentials following data theft by Midnight Blizzard and warnings of persistent threats from hacking groups.