Category Archives: cloud security

Microsoft’s Security Chickens Have Come Home to Roost

Posted on by

News analysis:  SecurityWeek editor-at-large Ryan Naraine reads the CSRB report on China’s audacious Microsoft’s Exchange Online hack and isn’t at all surprised by the findings.
The post Microsoft’s Security Chickens Have Come Home to Roost appea… Continue reading Microsoft’s Security Chickens Have Come Home to Roost→

A “cascade” of errors let Chinese hackers into US government inboxes

Posted on by

Microsoft still doesn’t known how Storm-0558 attackers managed to steal the Microsoft Services Account cryptographic key they used to forge authentication tokens needed to access email accounts belonging to US government officials. “The sto… Continue reading A “cascade” of errors let Chinese hackers into US government inboxes→

Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response to Chinese Hack

Posted on by

Cyber Safety Review Board, said “a cascade of errors” by Microsoft let state-backed Chinese cyber operators break into email accounts of senior U.S. officials.
The post Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response… Continue reading Scathing Federal Report Rips Microsoft for Shoddy Security, Insincerity in Response to Chinese Hack→

Cloud Active Defense: Open-source cloud protection

Posted on by

Cloud Active Defense is an open-source solution that integrates decoys into cloud infrastructure. It creates a dilemma for attackers: risk attacking and being detected immediately, or avoid the traps and reduce their effectiveness. Anyone, including sm… Continue reading Cloud Active Defense: Open-source cloud protection→