Microsoft Exchange state-linked hack entirely preventable, cyber review board finds

Cybersecurity Dive April 3, 2024
David Jones

The technology giant’s corporate culture fell short on security investments and risk management, and needs significant reforms, according to a damning report by the U.S. Cyber Safety Review Board.

Dive Brief:

• The state-linked intrusion on Microsoft Exchange Online that led to the theft of about 60,000 U.S. State Department emails last summer “was preventable and should never have occurred”, the Cyber Safety Review Board said Tuesday in a report.
• A series of operational and strategic decisions by Microsoft pointed to a corporate culture that deprioritized investments in enterprise security and rigorous risk management, despite the central role the company plays in the larger technology ecosystem, the report said.
• The CSRB urged Microsoft to publicly share its plans...

Today's Sponsors

Today's Sponsor