3 ms·

Microsoft is a large company. The threat intel team doesn't write code for Windows. The person you're quoting is highly regarded in this space. Her being part o

Microsoft is a large company. The threat intel team doesn't write code for Windows. The person you're quoting is highly regarded in this space. Her being part of MS is a very positive sign. The work this side of MS does in shutting down serious cyber crime and cyber espionage is well known in the security space.

zer00eyz 2y ago
https://www.cnn.com/2024/04/02/tech/us-government-microsoft-hack/index.html https://www.cnn.com/2024/04/02/tech/us-government-microsoft-... https://apnews.com/article/microsoft-cybersecurity-hack-raimondo-breach-b0901a93cca2ffaf05edacbfb9ecf3da https://apnews.com/article/microsoft-cybersecurity-hack-raim... https://abcnews.go.com/Business/microsoft-corporate-emails-hacked-russian-backed-group-company/story?id=106527859 https://abcnews.go.com/Business/microsoft-corporate-emails-h... Threat intel team is supposed to be watching the hen house, they are doing a bad job. Fundamentally they are doing their job using insecure products and insecure services. You say "highly regarded" I would say that "poor choices reflect on you (the threat team)". The one good apple in a barrel of rotten ones isn't going to save a thing.
- strictnein 2y ago
  Three of your four links now are basically the same incident. Threat Intel is not responsible for "watching the hen house". Threat Detection, Incident Response, etc would be the teams you're looking for. > the review board faulted Microsoft (MSFT) for not adequately protecting a sensitive cryptographic key That's Application Security, who likely set standards that were not followed. Again, Microsoft is a very large company. A security audit should have caught this issue, but didn't.
  - zer00eyz 2y ago
    > A security audit should have caught this issue Is there a culture of "security" at MS? No, and there never has been. "threat intel" is the group of people ideintyfing foxes, BY BEHAVIOR. They don't get their data out of thin air, it comes from threat detection and incedntd responses. Your making the argument that MS is structured like a TV police department, sure, but the intel team is like the fbi/cia... they have a much larger perview and scope and have to because of their work. Missing these sorts of thing in your own back yard isn't a statement of confidence.

zer00eyz 2y ago

https://www.cnn.com/2024/04/02/tech/us-government-microsoft-hack/index.html https://www.cnn.com/2024/04/02/tech/us-government-microsoft-... https://apnews.com/article/microsoft-cybersecurity-hack-raimondo-breach-b0901a93cca2ffaf05edacbfb9ecf3da https://apnews.com/article/microsoft-cybersecurity-hack-raim... https://abcnews.go.com/Business/microsoft-corporate-emails-hacked-russian-backed-group-company/story?id=106527859 https://abcnews.go.com/Business/microsoft-corporate-emails-h... Threat intel team is supposed to be watching the hen house, they are doing a bad job. Fundamentally they are doing their job using insecure products and insecure services. You say "highly regarded" I would say that "poor choices reflect on you (the threat team)". The one good apple in a barrel of rotten ones isn't going to save a thing.

strictnein 2y ago
Three of your four links now are basically the same incident. Threat Intel is not responsible for "watching the hen house". Threat Detection, Incident Response, etc would be the teams you're looking for. > the review board faulted Microsoft (MSFT) for not adequately protecting a sensitive cryptographic key That's Application Security, who likely set standards that were not followed. Again, Microsoft is a very large company. A security audit should have caught this issue, but didn't.
- zer00eyz 2y ago
  > A security audit should have caught this issue Is there a culture of "security" at MS? No, and there never has been. "threat intel" is the group of people ideintyfing foxes, BY BEHAVIOR. They don't get their data out of thin air, it comes from threat detection and incedntd responses. Your making the argument that MS is structured like a TV police department, sure, but the intel team is like the fbi/cia... they have a much larger perview and scope and have to because of their work. Missing these sorts of thing in your own back yard isn't a statement of confidence.