3 ms·

It's not the first time that a company got compromised due to microsoft software. This time it was their cloud offering, the previous N times it was AD, Exchang

It's not the first time that a company got compromised due to microsoft software. This time it was their cloud offering, the previous N times it was AD, Exchange, Outlook, WSUS (for delayed updates), ... And even if they'd move to something else they'd reach for solutions that also get their tentacles into everything because those solutions are convenient during those time windows where they're not exploited.

EGreg 3y ago
Wasn’t SolarWinds Microsoft software being compromised too? When the US govt got hacked they actually did something about it government-wide. Started new security standards. For themselves and their vendors like M$
- stonemetal12 3y ago
  SolarWinds is the name of company that was compromised, and as far as I can tell was never owned by MS.
  - nerdbert 3y ago
    Right, but the question is whether SolarWinds was owned due to an MS vuln. A quick scan of a summary of the SolarWinds story suggests that's not the case, but it's possible that the article I read glossed over too much.
    - marcosdumay 3y ago
      > the question is whether SolarWinds was owned due to an MS vuln No, but the other way around happened. It may be even this hack on the article, it's not very clear. The Solar Winds thing is probably much larger than what we have been allowed to know. I do expect more of it to come out, for decades because the victims just have no way to know they have a problem.