Scathing federal report rips Microsoft for shoddy security, insincerity in response to Chinese hack

The Biden administration's appointed Cyber Safety Review Board criticized Microsoft for "a cascade of errors" that allowed state-backed Chinese hackers to breach email accounts of senior U.S. officials, including Commerce Secretary Gina Raimondo. Highlighting Microsoft's inadequate security culture and lack of transparency about the breach's extent, the board calls for an overhaul in the company's security practices, given its vital role in national security, economic foundations, and public health and safety. The report suggests pausing new features for Microsoft's cloud computing until substantial security upgrades are made and demands a plan with specific timelines for security-focused reforms throughout the company. Despite these challenges, Microsoft acknowledged the board's review and committed to enhancing system defenses and detection capabilities.

Opens on AP News