Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese hack

Government review criticizes Microsoft for security lapses in "preventable" Exchange Online hack

The Exchange Online hack that took place last May is believed to have been linked to a China-affiliated threat actor known as Storm-0558 stealing an Azure signing key in late 2021 from an engineer's compromised laptop that came into Microsoft's possession after an acquisition.Read Entire Article

‘Cascade of errors’ by Microsoft led to Chinese email hack of top US officials, scathing report says

The Biden-appointed Cyber Safety Review Board (CSRB) said it found “operational and strategic decisions” led to the July breach.

Government Advisory Board Blames Microsoft’s ‘Culture’ for Chinese Hacks

A review board established by President Joe Biden is blaming Microsoft’s company culture for a hack that compromised the emails of more than 500 people including the Secretary of Commerce. The Cyber Safety Review Board, which was created and appointed by President Joe Biden in 2021, said in a new report that China-based hackers were able to steal the data because of “the cascade of Microsoft’s avoidable errors.” “The board finds that Microsoft h…

Microsoft really blew it, says government report on Chinese hacks

A government report found Microsoft needs to make a security "overhaul."Toby Scott/Getty ImagesMicrosoft's security systems are inadequate and need an "overhaul," a government report found.Security flaws in Microsoft's systems let Chinese hackers breach the company's networks last summer, DHS found.Microsoft needs to seriously improve its systems for the sake of national security, the report says.Microsoft's security culture needs work, a govern…

Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese hack

A Biden administration-appointed review board has issued a scathing indictment of Microsoft corporate security and transparency.

Microsoft blamed for “a cascade of security failures” in Exchange breach report

Summer 2023 intrusion pinned to corporate culture, "avoidable errors."