"US Report Blames Microsoft for Security Failures in Chinese Hacks"
TL;DR
A federal Cyber Safety Review Board report has blamed Microsoft for "a cascade of security failures" that led to the 2023 Exchange breach, citing inadequate security culture and preventable errors. The report details critical failures in Microsoft's response to the breach and highlights inaccurate public statements and unsolved mysteries. Microsoft has acknowledged the need to adopt a new culture of engineering security and plans to review the report for additional recommendations.
Topics:businesstechnology#breach#cyber-safety-review-board#cybersecurity#exchange#microsoft#technology
- Microsoft blamed for “a cascade of security failures” in Exchange breach report Ars Technica
- Microsoft really blew it, says government report on Chinese hacks Business Insider
- U.S. government board calls Microsoft's security practices "inadequate" Axios
- US reprimands Microsoft for security failures that allowed Chinese hack The Guardian
- Microsoft could have prevented Chinese cloud email hack, US cyber report says The Verge
Want the full story? Read the original reporting
Read on Ars Technica