"US Cyber Board Launches Probe into Microsoft's Government Email Breach"
The US Cyber Security Review Board (CSRB) has announced that it will investigate the recent intrusion of US government email systems provided by Microsoft. The breach, which involved China state-backed hackers, drew criticism towards Microsoft's handling of the incident. The CSRB's investigation will include a broader review of issues related to cloud-based identity and authentication infrastructure. The stolen signing key and a patched flaw allowed the hackers to access email accounts. The intrusions went undetected for a month until the State Department discovered the breach and notified Microsoft. Following the incident, Microsoft agreed to make logs available for customers at no additional cost. Democratic lawmaker Ron Wyden has called for an investigation into whether "lax cybersecurity practices" enabled the Chinese hackers to spy on high-ranking federal government officials. The CSRB was established by President Biden to review major cybersecurity events and provide recommendations for prevention.