Breaching Microsoft via DeepSpeed GitHub Repository

EAtmULFO wrote: post #3

How crazy is it that Microsoft is not even monitoring/alerting on commands like, "whoami" being issued on their managed systems? Wow.

I wonder if alerts did come in, but Microsoft didn't respond quickly enough. That's giving them the benefit of the doubt, though; very possible they weren't monitoring this system. If they were, they probably would have identified the fact that it was exposed to the internet via a public GitHub repository....

Re: Breaching Microsoft via DeepSpeed GitHub Repository

#6

Post by EAtmULFO » Wed, Apr 17, 2024, 7:52 PM UTC

cybertoph64 wrote: post #5

EAtmULFO wrote: post #3

How crazy is it that Microsoft is not even monitoring/alerting on commands like, "whoami" being issued on their managed systems? Wow.

I wonder if alerts did come in, but Microsoft didn't respond quickly enough. That's giving them the benefit of the doubt, though; very possible they weren't monitoring this system. If they were, they probably would have identified the fact that it was exposed to the internet via a public GitHub repository....

Agreed. That was a great read and cautionary tale about not following best practices!