5 ms·
Microsoft Allegedly Breached
- zatertip 5y agoAlternate link with more details: https://www.cyberkendra.com/2022/03/microsoft-allegedly-breached-by-lapsus.html https://www.cyberkendra.com/2022/03/microsoft-allegedly-brea...
- tuwtuwtuwtuw 5y agoThere isn't really more details there though.
- zatertip 5y agoThe screenshot is not cropped and it has a list of the projects affected in the article. I agree the information is still sparse.
- tuwtuwtuwtuw 5y agoSure. But the list of projects is for 1 Azure Devops organization and the list appear to be in alphabetical order and showing B to C. Also it looks a bit like the logged on user only has access to one of the projects (at least it's only showing icons for one of them).
- eurasiantiger 5y agoOnce a threat actor has access to internal, less hardened systems, it is a matter of time until they have access to everything. In this case it’s a matter of privilege escalation at best and RCE at worst, no lateral movement required unless it’s easier to escalate directly in the IdP system or as a MitM between the IdP and the service in the screenshot.
- tuwtuwtuwtuw 5y agoMy point was that so far every little information has been shared. I have no idea what your point is. Also not sure if what you mean by "internal system" here. I can also log on to Azure Devops service (it public), but that doesn't mean I can access windows source code.
- aaron695 5y ago
- tuwtuwtuwtuw 5y agoThat group has been trying to buy Microsoft employee credentials. Maybe they found a seller.
- moltke 5y agoMaybe now people will understand why local user accounts are important... who am I kidding things are just going to keep getting worse.
- phendrenad2 5y agoNo, maybe you can tell us.
- cryptos 5y agoTwitter is such a terrible medium for communicating more than a headline!
- FDSGSG 5y agoIn this particular case there is nothing to communicate that doesn't fit nicely in a tweet. Only way you could stretch this into an article beyond a headline is by bundling a bunch of unnecessary bullshit. Perhaps there'll be a comment from Microsoft, they won't say anything useful beyond "No customer information was accessed"
- FDSGSG 5y agoThis happens on an almost yearly basis. Source code for ~all major windows releases is actively traded. (Same also goes for Apple, Cisco, etc...) Protecting source code that a huge amount of employees need access to is hard. Previous public example: https://www.bbc.co.uk/news/technology-40366823 https://www.bbc.co.uk/news/technology-40366823 Many exploit devs have access to this stuff, but would obviously never publicly discuss it, fearing leaks and liability.
- yakak 5y agoKeeping an OS private is virtually impossible, for the most part every engineer has access to every piece, so any intrusion is also likely access to current OS source. Rumors out of Google were a bit different about their search algorithm which may be comparable to a leak of bing code.
- zinekeller 5y agoIf I base on the list, it seems that it was their California branch that was breached. No meaningful Azure or Windows source code was listed (which is hosted in Redmond) and a lot of Bing and Cortana ones (which are primarily developed in California). Although source code leakage is bad, it should be noted that most governments already has copies of the Windows and Office source code access through legitimate means (Source Sharing agreements).
- nojito 5y agoMicrosoft’s threat model operates on the idea that its source code is not protected.