4 ms·
I am Jack's complete lack of surprise. First it was "a very small percentage of Microsoft corporate email accounts" (their C-suite executives and security team
by dralley 2y ago
I am Jack's complete lack of surprise.
First it was "a very small percentage of Microsoft corporate email accounts" (their C-suite executives and security teams) and "To date, there is no evidence that the threat actor had any access to customer environments, production systems, source code, or AI systems."
Then it was "access to some of the company's source code repositories and internal systems. To date we have found no evidence that Microsoft-hosted customer-facing systems have been compromised."
And now this.
- chinathrow 2y agoYes, a total own. So will they rebuild from scratch?
- kirth_gersen 2y agoProbably better to patch the current system than create a new one with potentially new unknown vulnerabilities.
- steve1977 2y agoRebuild what exactly? From an article back in January: The company said the hackers used a "password spray attack" This wasn’t necessarily a technical vulnerability.
- justinclift 2y ago> So will they rebuild from scratch? Are you suggesting they'll suddenly have a fit of competence? That would be super surprising for everyone. Including themselves.
- brookst 2y ago> This week we are continuing notifications to customers who corresponded with Microsoft corporate email accounts that were exfiltrated by the Midnight Blizzard threat actor My interpretation is that they are notifying customers who corresponded with compromised Microsoft accounts, not that they are saying customer-use email systems were compromised. Do you read that differently?
- deleted 2y ago[deleted]