Microsoft researchers say the group, tracked as Storm-0539 or Atlas Lion, targets employees with major U.S. retailers who control gift card operations.
The commitments are voluntary, but CISA officials said they are committed to measuring progress by the signatories across key commitments over the next year.