4 ms·
Microsoft says Russian hackers breached its systems, accessed source code
- anonbanker 3y ago[flagged]
- rightbyte 3y agoYe I am getting quite tired of these hit pieces when the root cause are bad system setups with centralization of power and data and convenience. It seems to me like some kind of cooperation between people that want to CYA and shift blame and those who want me to end my days in a trench.
- ratg13 3y agoI don’t think you’re making a solid argument about the naming, because these names are often given by researchers. That said, I’ve never believed the Lazarus/NK connection is anything more than smoke and mirrors, and agree with you there.
- yogorenapan 3y agoYou’re probably gonna be downvoted but I somewhat agree with you that it’s possible that it’s a domestic actor pretending to be from an enemy of the US. If I were to ever try to hack a western company, I would do it through a proxy in China to encourage the authorities to give up pursuit
- justinclift 3y agoIs my count correct, with this making the 3rd time Microsoft have been significantly compromised in the last ~12 months?
- breadwinner 3y agoFrom the source: https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/ https://msrc.microsoft.com/blog/2024/03/update-on-microsoft-...
- dralley 3y ago5 weeks ago: "the threat actor used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts [cough like the CEO and security teams]... To date, there is no evidence that the threat actor had any access to customer environments, production systems, source code, or AI systems." Now: "This has included access to some of the company's source code repositories and internal systems. To date we have found no evidence that Microsoft-hosted customer-facing systems have been compromised. It is apparent that Midnight Blizzard is attempting to use secrets of different types it has found. Some of these secrets were shared between customers and Microsoft in email, and as we discover them in our exfiltrated email, we have been and are reaching out to these customers to assist them in taking mitigating measures" The constant downplaying at every stage puts a bad taste in the mouth. Three weeks from now we'll probably be talking about how "a small number of customer accounts have been compromised" yborg said it right: https://news.ycombinator.com/item?id=39063441 https://news.ycombinator.com/item?id=39063441
- breadwinner 3y agoThat's standard practice [1]. When it comes to disclosing hacks, standard practice is to disclose a limited hack first, then when the hoopla dies down, disclose that the hack was "worse than previously thought". [1] https://circles.page/5680a56b5c28af0998656e09/Hacks-worse-than-initially-thought https://circles.page/5680a56b5c28af0998656e09/Hacks-worse-th...
- Veserv 3y agoYou only have to disclose what you have definitively discovered, not what you have definitively ruled out. Think how your customers would react if they were hacked and harmed. It is paramount that you err on the side of caution otherwise your bank account might be negatively impacted if your customers exercise due caution and react appropriately to the news. Just remember the slogan: “My money is more important than your safety.”
- cyrs 3y ago[flagged]
- justinclift 3y agoMorale at Microsoft is apparently in the toilet these days, after they had their most profitable year ever (as told to their investors), but then turned around and lied to their employees saying its had been a tough year so no-one gets raises. No wonder more than 1/2 of their employees want to leave: https://www.windowscentral.com/microsoft/microsoft-employees-express-concerns-over-the-companys-leadership-in-a-leaked-poll https://www.windowscentral.com/microsoft/microsoft-employees...
- cyrs 3y agoThat's not good. Microsoft is too important as a layer for a lot of computation and access at many firms. I love Microsoft technology, very powerful platform...but at this point it may be time to recommend to all firms that they rely on more open stack alternatives for things and be cloud-native as much as possible in case needing to decouple at a moment's notice.
- tester756 3y agoGood, more jobs for me
- gundmc 3y agoMicrosoft has had some of the most atrocious security incidents of all major cloud providers and it doesn't seem to slow them down at all.