Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 14-May-2025 07:02:32 JST Kevin Beaumont

   There’s an interesting piece in Bloomberg on MSTIC, where MSTIC basically spells out they spy for the US government using Windows and Azure telemetry.

   I think it’s smart as saying the quiet bit out loud kinda insulates it further down the road.. ie ‘well, we did tell you’.

   https://www.bloomberg.com/news/features/2025-05-09/microsoft-s-hacker-hunters-inside-the-secretive-mstic-unit

   • Embed this notice
     Eleanor Saitta (dymaxion@infosec.exchange)'s status on Wednesday, 14-May-2025 16:32:01 JST Eleanor Saitta

     in reply to

     @GossiTheDog
     Do you know how security works at scale? This isn't news and among the majors, MS was mostly late to the party. That said, "spies" is doing a lot of work here. If you mean "collaborates specifically around threat intelligence", sure. If you mean "provides the US with general purpose intelligence outside the digital security space above and beyond the cooperation that the US can compel with statutory powers", no, we have no reason to believe that.

     Also, with CISA dead, it's unclear that anyone on the USG side is still listening.

   • Embed this notice
     Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 14-May-2025 16:32:01 JST Kevin Beaumont

     in reply to

     • Eleanor Saitta

     @dymaxion Yes, I know how security works at scale, and I know how Microsoft works because I worked there. It is different to how other orgs work.