Microsoft actions following attack by nation state actor Midnight Blizzard
1–10 of 204 posts
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#2Why does the data security industry seem to be so into obfuscated jargon? It’s like a new industry microcosm corporatespeak.
It’s ok to call them countries, hackers, and intrusions.
Microsoft got hacked by Russian government hackers.
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#3this reminds me of guys trying to out-shout each other about who wants to fight the most, in front of a lot of (Ynews) onlookers
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#4Why does the data security industry seem to be so into obfuscated jargon? It’s like a new industry microcosm corporatespeak. It’s ok to call them countries, hackers, and intrusions. Microsoft got hacked by Russian government hackers.
Because the reality is murky.
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#5Why does the data security industry seem to be so into obfuscated jargon? It’s like a new industry microcosm corporatespeak. It’s ok to call them countries, hackers, and intrusions. Microsoft got hacked by Russian government hackers.
My summary understanding of this write-up is that a weak password was guessed and allowed entry into an old system that had access to stuff it shouldn't have had access to.
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#6Interesting that they seem to suggest that applying security is now more important than avoiding service disruptions. This may be the hopeful dawn of a new era.
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#7Why does the data security industry seem to be so into obfuscated jargon? It’s like a new industry microcosm corporatespeak. It’s ok to call them countries, hackers, and intrusions. Microsoft got hacked by Russian government hackers.
Your summary is also ambiguous. Were they hacked by the Russian CIA equivalent? Were they hacked by people funded by the Russian government? Were they hacked by people funded by senior government officials?
I think it's possible that the truth is a little murky, and capturing that ambiguity is actually clearer than trying to wave it away
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#8> access a very small percentage of Microsoft corporate email accounts
Ok, so far so good.
> including members of our senior leadership team
Ahhh, so maybe the attackers were after the senior leadership team and therefore stopped at the "very small percentage".
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#9Haha "...access a very small percentage of Microsoft corporate email accounts, including members of our senior leadership team and employees in our cybersecurity, legal, and other functions, and exfiltrated some emails and attached documents."
Seems like a big deal. Also, this may be why I've been getting massive amounts of "unusual account sign-in activity" emails for Microsoft about an old outlook account i no longer use...
Hopefully these state actors can get access to my vsts server i no longer can find and deploy an old app for me ;)
Re: Microsoft actions following attack by nation state actor Midnight Blizzard
#10Why does the data security industry seem to be so into obfuscated jargon? It’s like a new industry microcosm corporatespeak. It’s ok to call them countries, hackers, and intrusions. Microsoft got hacked by Russian government hackers.
> It’s ok to call them countries, hackers, and intrusions.
It's not if you want to do business in that country. Or if you annoy allies of that country (accusing certain countries might get senators breathing down your neck!). You are accusing a government of committing a crime, or at least a wildly unethical behavior. Those are huge charges. To your point, I wish they could be more direct, but...
> Microsoft got hacked by Russian government hackers.
It is not known whether this hacking group is private, government sponsored, or government run. They could be a private group that takes both private and government contracts.
If they were funded via government channels, who was it? A higher up person using their personal wealth? A specific agency? Multiple agencies?
The reason they are being so vague is because they don't know the answers, and it is very discrediting to throw around incorrect accusations.