Article summary: According to IT House, Microsoft’s security record during this period is regrettable. Since Microsoft’s Azure service was attacked last month, the company is facing increasing criticism. Microsoft disclosed a major vulnerability in its Azure platform on July 12 last month. Microsoft also admitted that a hacker group called Storm-0558 had attacked it. It is reported that this attack affected 25 organizations, and a large number of emails of corporate executives and government officials were stolen. According to foreign media CyberSecurityDive
According to IT House, Microsoft’s security record during this period is regrettable. Since Microsoft’s Azure service was attacked last month, the company is facing increasing criticism.
Microsoft disclosed a major vulnerability in its Azure platform on July 12 last month. Microsoft also admitted that a hacker group called Storm-0558 had attacked it. It is reported that this attack affected 25 organizations, and a large number of emails of corporate executives and government officials were stolen.
According to foreign media CyberSecurityDive, U.S. Senator Ron Wyden sent a letter to the U.S. Department of Justice last week, asking the U.S. Department of Justice to hold Microsoft accountable for "negligent cybersecurity behaviors." He also revealed that cybersecurity company Tenable also discovered another serious cybersecurity vulnerability in Microsoft's Azure service. However, after Microsoft discovered this vulnerability, it delayed for three months before partially repairing it.
It is reported that network security company Tenable discovered this vulnerability in March this year, which allows hackers to invade companies using Microsoft Azure services. Ron Wyden claimed that after Tenable notified Microsoft, it took Microsoft "more than 90 days to implement a partial fix." Only companies that fully redeployed Azure services after the fix would not be affected by the vulnerability. Therefore, these companies need to pay an additional cost to ensure the security of the enterprise.
▲ Image source cybersecurity company Tenable
Amit Yoran, CEO of cybersecurity company Tenable, wrote in a LinkedIn post that Microsoft's cybersecurity record is "worse than most people imagine."
Amit Yoran believes that Microsoft, as a large company in the industry, appears to be "extremely irresponsible and even blatantly negligent" in its treatment of consumers and even corporate customers. He also pointed out that data from Google’s “Project Zero” shows that since 2014, Microsoft products have accounted for 42.5% of the list of “zero-day vulnerabilities”.
IT Home found that Microsoft senior director Jeff Jones has responded to the above incident. He said:
We appreciate working with the security community to responsibly disclose product issues. We follow an extensive process that includes a thorough investigation, development of updates for all affected product versions, and compatibility testing in other operating systems and applications. Ultimately, the development of security updates requires a delicate balance between timeliness and quality, while ensuring maximum protection and minimal disruption to customers.
Article source: IT Home
Insight Eye MIT System
Hebei Public Network Security No. 13019902001038
