topic Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h in Industry News

Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese hack

Caute_cautim — Wed, 03 Apr 2024 23:18:20 GMT

Hi All

Now would you put all your eggs into the same basket?

https://apnews.com/article/microsoft-cybersecurity-hack-raimondo-breach-b0901a93cca2ffaf05edacbfb9ecf3da

https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf

Regards

Caute_Cautim

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Early_Adopter — Wed, 03 Apr 2024 23:45:11 GMT

A failure cascade,
Systemically flawed,
Fit for purpose? No.

Knowing this, how many boards can justify using Microsoft for Office, Email, Storage, LLMs, IaaS, Databases, BI et Al?

How is the status quo justified? The writing might be on the wall but those charged with the responsibility of protecting their companies don’t seem to be reading it…

At the very least companies reliant on IP for their success should be seriously considering alternatives.

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Caute_cautim — Thu, 04 Apr 2024 00:19:40 GMT

@Early_Adopter

Government policies - go for the discounts best value for money? Does it pay off in the end, when things like this occur?

Regards

Caute_Cautim

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Early_Adopter — Thu, 04 Apr 2024 00:24:36 GMT

Yeah, mostly rhetorical, as in we know the answer, however we probably require someone to regulate the service provider… do we know if Google is any better? Or just not worth attacking yet as not enough customers..?

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Caute_cautim — Thu, 04 Apr 2024 19:09:16 GMT

@Early_Adopter This also suggests that NIST SP800 53 R5 or NIST Cybersecurity Framework including SOC 1, SOC 2 reviews are inadequate for these circumstances - more rigorous measures need to be put in place and not precluding penalties or legal cases.

Regards

Caute_Cautim

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Early_Adopter — Fri, 05 Apr 2024 08:43:44 GMT

Frankly I think at this stage we need to have massive increase to scope, depth and frequency on penetration testing.

Another concern is the temptation to shortcut for profits. We do need separation - you design it … ok you don’t build it, … you built it you don’t run it… you run it? We get someone else to test.

This last, the security testing needs to embrace all the techniques out there, be continuous and there needs to be a live score running for the consumers. Ubique

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Caute_cautim — Sun, 07 Apr 2024 20:01:29 GMT

Hi All

This is an interesting consolidation on the Microsoft security issue:

https://www-securityweek-com.cdn.ampproject.org/c/s/www.securityweek.com/microsofts-security-chickens-have-come-home-to-roost/amp/

This could take years to resolve from a cultural perspective, certainly not overnight.

Regards

Caute_Cautim

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Caute_cautim — Mon, 08 Apr 2024 03:32:12 GMT

HI All

Another piece about the Microsoft issue: A lot of questions to ask our respective Governments:

https://www.theregister.com/2024/04/05/microsoft_government_contracts/?utm_source=daily&utm_medium=newsletter&utm_content=article

Regards

Caute_Cautim

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Early_Adopter — Mon, 08 Apr 2024 11:07:56 GMT

Yup, takes a while to turn that mindship around.

Re: Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese h

Caute_cautim — Tue, 09 Apr 2024 04:37:50 GMT

Hi All

Have a look at this subsequent analysis too:

https://accelerationeconomy.com/cloud-wars/microsoft-cybersecurity-disaster-triggers-customer-doubt-competitor-opportunity/

Regards

Caute_Cautim