Embed Notice

Report into MS breach is out: https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf

I had a tweet in 2021 saying MSTIC should not use the Nation State Notification process to hide breaches from the public.

That was a reference to the Affirmed Networks breach - aka Azure for Operators - listed in this report. They hid it.

The website for Azure for Operators at the time had Satya’s face on it.. that breach, which they refused to share details about, apparently led to this one.