Recommends Microsoft to implement security-focused overhaul of all its products (representative)
The U.S. Cybersecurity Review Board said on Tuesday last year’s Chinese hack of senior government officials’ emails was “preventable” and blamed tech giant Microsoft for cybersecurity lapses and a deliberate lack of transparency.
In its report, the committee said it found that Microsoft had made a series of decisions that reduced enterprise security, risk management and customer trust in protecting their data and operations.
The breach, which stemmed from the theft of a Microsoft engineer’s company account, was carried out by Storm-0558, a hacker group affiliated with the People’s Republic of China.
“While no organization is immune to cyberattacks from well-resourced adversaries, we have mobilized our engineering teams to identify and mitigate legacy infrastructure, improve processes, and perform security baselines,” Microsoft said.
“Our security engineers continue to harden all of our systems against attacks and implement more robust sensors and logs to help us detect and repel our adversaries’ cyber armies. We will also review the final report for additional recommendations.”
The board recommended that Microsoft implement security-focused changes to all of its products.
Last year, the tech giant said the breach of senior State Department and Commerce officials was carried out by Storm-0558, which allegedly stole hundreds of thousands of emails from senior U.S. officials, including Commerce Secretary Gina Raimondo, the U.S. Ambassador to China, etc. Nicholas Burns, China, and Daniel Kritenbrink, Assistant Secretary of State for East Asian Affairs.
(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)
