"Government Report Blames Microsoft for China Hack Due to Security Failures"

The Cyber Safety Review Board (CSRB) has blamed Microsoft for a 2023 Chinese hack that targeted the emails of top U.S. government officials, citing a "cascade of avoidable errors" and a corporate culture that failed to prioritize security and risk management. The report highlighted Microsoft's failure to prevent the hack and lack of transparency about the attack's origin. The State Department detected the breach last June, and the report also suggested that Microsoft was not fully transparent about what they knew regarding the origin of the attack. Microsoft has been asked to develop and publicly share a plan for reforms across its company and products.