Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://cyberplace.social/users/GossiTheDog/statuses/112203955422409539">Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 03-Apr-2024 07:22:48 JST</a><a href="https://cyberplace.social/@GossiTheDog" title="gossithedog@cyberplace.social"><img src="https://gnusocial.jp/avatar/38360-48-20251103133701.webp" width="48" height="48" alt="Kevin Beaumont" style="position: absolute; left: 0; top: 0;">Kevin Beaumont</a></section><article><p>Absolutely blistering independent review into Microsoft 365 breach early last year is due this week from Cyber Safety Review Board, highlights huge problems with Microsoft’s security. </p><p>I did not participate. </p><p>Contains something I didn’t know - last month, Microsoft quietly corrected a blog to say they never found the crash dump with the certificate, so do not know how China got it. They did not store it in a HSM.</p><p>References earlier breach they hadn’t disclosed.</p><p> <a href="https://wapo.st/4cJpKtW" rel="nofollow noreferrer">https://wapo.st/4cJpKtW</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/2893343#notice-5750654">In conversation</a><time datetime="2024-04-03T07:22:48+09:00" title="Wednesday, 03-Apr-2024 07:22:48 JST">Wednesday, 03-Apr-2024 07:22:48 JST</time> <span>from <span><a href="https://cyberplace.social/@GossiTheDog/112203955422409539" rel="external" title="Sent from cyberplace.social via ActivityPub">cyberplace.social</a></span></span><a href="https://cyberplace.social/@GossiTheDog/112203955422409539">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: www.washingtonpost.com</div><h5><a href="https://www.washingtonpost.com/national-security/2024/04/02/microsoft-cyber-china-hack-report/?pwapi_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJyZWFzb24iOiJnaWZ0IiwibmJmIjoxNzEyMDMwNDAwLCJpc3MiOiJzdWJzY3JpcHRpb25zIiwiZXhwIjoxNzEzNDEyNzk5LCJpYXQiOjE3MTIwMzA0MDAsImp0aSI6Ijg2NTZjY2U5LTZjZDgtNGY5Zi1iMmIxLWQzNzY4ZjA2MzQzMiIsInVybCI6Imh0dHBzOi8vd3d3Lndhc2hpbmd0b25wb3N0LmNvbS9uYXRpb25hbC1zZWN1cml0eS8yMDI0LzA0LzAyL21pY3Jvc29mdC1jeWJlci1jaGluYS1oYWNrLXJlcG9ydC8ifQ.0_ydsw59GIWJ7YQBcEWuc328QSaHRZBLoPBsZDXs3wk&amp;itid=gfta">Microsoft faulted for ‘cascade’ of failures in Chinese hack</a></h5><div></div></header><div>The independent Cyber Safety Review Board’s forthcoming report knocks the tech giant for shoddy cybersecurity, lax corporate culture and a deliberate lack of transparency.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 03-Apr-2024 07:22:48 JST Kevin Beaumont
Absolutely blistering independent review into Microsoft 365 breach early last year is due this week from Cyber Safety Review Board, highlights huge problems with Microsoft’s security.
I did not participate.
Contains something I didn’t know - last month, Microsoft quietly corrected a blog to say they never found the crash dump with the certificate, so do not know how China got it. They did not store it in a HSM.
References earlier breach they hadn’t disclosed.
https://wapo.st/4cJpKtW
In conversationWednesday, 03-Apr-2024 07:22:48 JST from cyberplace.socialpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: www.washingtonpost.com
  Microsoft faulted for ‘cascade’ of failures in Chinese hack
  The independent Cyber Safety Review Board’s forthcoming report knocks the tech giant for shoddy cybersecurity, lax corporate culture and a deliberate lack of transparency.

Public

Embed Notice

HTML Code

Corresponding Notice