Názor k článku Celý rozsah IP adres Wedosu se dostal na blacklist, zákazníkům se ztrácela pošta od MarekM - Mně ten Microsoft přijde, že po těch problémech...

Mně ten Microsoft přijde, že po těch problémech s bezpečností Exchange a BEC u amerických vládních institucí obecně lítá zleva doprava a neví, jak to uchopit, tak radši udělá víc než míň.

Doporučuji přečíst report od Cyber Safety Review Board (CSRB), níže pouze pár hlavních zjištění. Osobně u MS maily nemám a mít nebudu, zákazníci co ho používají musí vytvořit tlak, aby to dělal líp...

<hr />

The Board finds that this intrusion was preventable and should never have occurred.

The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in
the technology ecosystem and the level of trust customers place in the company to protect their data and operations.

The Board reaches this conclusion based on:

1. the cascade of Microsoft’s avoidable errors that allowed this intrusion to succeed;

2. Microsoft’s failure to detect the compromise of its cryptographic crown jewels on its own, relying instead on a customer to reach out to identify anomalies the customer had observed;

3. the Board’s assessment of security practices at other cloud service providers, which maintained security controls that Microsoft did not;

4. Microsoft’s failure to detect a compromise of an employee's laptop from a recently acquired company prior to allowing it to connect to Microsoft’s corporate network in 2021;

5. Microsoft’s decision not to correct, in a timely manner, its inaccurate public statements about this incident, including a corporate statement that Microsoft believed it had determined the likely root cause of the intrusion when in fact, it still has not; even though Microsoft acknowledged to the Board in November 2023 that its September 6, 2023 blog post about the root cause was inaccurate, it did not update that post until March 12, 2024, as the Board was concluding its review and only after the Board’s repeated questioning about Microsoft’s plans to issue a correction;

6. the Board's observation of a separate incident, disclosed by Microsoft in January 2024, the investigation of which was not in the purview of the Board’s review, which revealed a compromise that allowed a different Review of the Summer 2023 Microsoft Exchange Online Intrusion nation-state actor to access highly-sensitive Microsoft corporate email accounts, source code repositories, and internal systems; and

7. how Microsoft’s ubiquitous and critical products, which underpin essential services that support national security, the foundations of our economy, and public health and safety, require the company to demonstrate the highest standards of security, accountability, and transparency.

Odkaz : https://www.cisa.gov/resources-tools/resources/CSRB-Review-Summer-2023-MEO-Intrusion

10. 10. 2024, 09:37 editováno autorem komentáře