🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥

Startup Showcase

Premium Content

Try our Valuation Calculator →

News on Medial

Microsoft blamed for “a cascade of security failures” in Exchange breach report

Arstechnica

Arstechnica · 1y ago

Microsoft blamed for “a cascade of security failures” in Exchange breach report

A federal Cyber Safety Review Board has released a report on the breach last summer that resulted in the theft of hundreds of thousands of emails from cloud customers, including federal agencies, by Chinese hackers. The report highlights "security failures" at Microsoft and states that the company's security culture was inadequate. It also emphasizes the need for Microsoft to adjust to the evolving threats faced by cloud providers. The report mentions critical failures on the part of Microsoft before, during, and after the breach, and labels it as preventable. Microsoft has cooperated with the review board and expressed its commitment to enhancing security measures.

Related News

Review board to issue report detailing Microsoft's lapses in China hack: report

Economic Times

Economic Times · 1y ago

Review board to issue report detailing Microsoft's lapses in China hack: report

The US Cyber Safety Review Board is set to release a report on Microsoft's failures that led to a Chinese hack of US government officials' emails last year. The intrusion affected Microsoft Exchange Online mailboxes of 22 organizations and over 500 individuals globally. Microsoft acknowledges that the attack should not have occurred and has been taking measures to improve security. The company awaits the final report for additional recommendations. The report allegedly blames poor cybersecurity practices, a lax corporate culture, and a lack of transparency from Microsoft regarding the origins of the breach.

Cyber board says Chinese hack of US officials was 'preventable'

Economic Times

Economic Times · 1y ago

Cyber board says Chinese hack of US officials was 'preventable'

The US Cyber Safety Review Board blamed Microsoft for a Chinese hack that targeted top government officials' emails last year. The board's report highlighted Microsoft's cybersecurity flaws and lack of transparency, stating that the company's decisions had compromised enterprise security and customer trust. The hack, carried out by the Chinese group Storm-0558, originated from the compromise of a Microsoft engineer's corporate account. Responding to the accusations, Microsoft highlighted efforts to improve security and pledged to review the report for further recommendations. The board urged Microsoft to implement security-focused reforms across all its products.

CGI Federal points finger at Atlassian bug for US government data breach

Techradar

Techradar · 1y ago

CGI Federal points finger at Atlassian bug for US government data breach

A bug in the Atlassian collaboration platform has been blamed for a recent data breach that affected CGI Federal, an IT contractor for the US government. Over 6,000 current and former employees were impacted by the breach, and it is unclear if other government agencies were affected. CGI Federal is working with authorities and clients to identify the data affected by the Confluence exploit, with the vulnerability discovered in October 2023. The Cybersecurity & Infrastructure Security Agency (CISA) recommends immediate application of upgrades provided by Atlassian to mitigate the exploit.

Microsoft could have prevented Chinese cloud email hack, US cyber report says

The Verge

The Verge · 1y ago

Microsoft could have prevented Chinese cloud email hack, US cyber report says

A report by the US Cyber Safety Review Board has found that Microsoft's failure to prioritize enterprise security investments and rigorous risk management contributed to Chinese hackers breaching US government emails through its Microsoft Exchange Online software. The incident affected over 500 people, including US government employees working on national security. The report calls for an overhaul of Microsoft's security culture, highlighting the need to prevent such intrusions. This comes as Microsoft faces ongoing attacks from Russian state-sponsored hackers, with the same group behind the SolarWinds attack spying on executive email inboxes and accessing the company's source code repositories and internal systems.

These were the badly handled data breaches of 2024 | TechCrunch

TechCrunch · 1y ago

These were the badly handled data breaches of 2024 | TechCrunch

TechCrunch has compiled a list of recent data breaches and security incidents from various companies. Genetic testing company 23andMe blamed its users for a data breach that exposed millions of customers' data. Change Healthcare, a healthcare tech company, took months to confirm a breach that exposed over 100 million people's private health information. London-based provider Synnovis suffered a ransomware attack, causing months of disruption to NHS services. Cloud computing giant Snowflake experienced mass hacks that targeted its corporate customers. The city of Columbus, Ohio sued a security researcher who reported on a ransomware attack. Salt Typhoon, a China-backed hacking group, infiltrated the networks of U.S. phone and internet providers. MoneyGram, a money transfer company, suffered a data breach, but the number of affected customers remains undisclosed. U.S. retail giant Hot Topic experienced a major data breach, but the company has not publicly confirmed or notified customers about the incident.

Microsoft left internal passwords exposed in latest security blunder

The Verge

The Verge · 1y ago

Microsoft left internal passwords exposed in latest security blunder

Last month, Microsoft faced a server security breach that exposed passwords, keys, and credentials of its employees to the internet. The vulnerability was discovered by three security researchers at SOCRadar, who found that an Azure-hosted server related to Microsoft's Bing search engine was left unprotected and accessible to anyone. The server contained security credentials used by Microsoft employees to access internal systems, making it a potential gateway for hackers to access other critical data. This incident highlights the need for stronger security measures in the software industry.

WazirX suffers security breach; cybersecurity firm pegs hack at $234.9 million

Economic Times

Economic Times · 1y ago

WazirX suffers security breach; cybersecurity firm pegs hack at $234.9 million

Indian cryptocurrency exchange WazirX faced a security breach involving its Safe Multisig wallet on Ethereum. The exchange reported the incident and temporarily paused INR and crypto withdrawals. A Web3 security firm identified several suspicious transactions, with approximately $234.9 million worth of funds moved to a new address. The transactions were funded by Tornado Cash, a decentralized protocol for private transactions on Ethereum. The suspicious address has swapped various digital assets and attempts to reach WazirX by the security firm went unanswered.

Microsoft informs customers that Russian hackers spied on emails

Economic Times

Economic Times · 1y ago

Microsoft informs customers that Russian hackers spied on emails

Russian hackers managed to breach Microsoft's systems earlier this year, gaining access to staff inboxes and stealing emails from its customers. This incident highlights the extent of the breach and raises concerns about the security of Microsoft's software and systems against foreign threats. The hackers, believed to be linked to the Russian government, targeted cybersecurity researchers who were investigating the actions of a Russian hacking group. Microsoft is now notifying affected customers and sharing compromised emails as part of its ongoing investigation into the breach.

CoinDCX CHRO Mudita Chauhan and CISO Sridhar G step down - The Economic Times

Economic Times

Economic Times · 4m ago

CoinDCX CHRO Mudita Chauhan and CISO Sridhar G step down - The Economic Times

CoinDCX, a leading Indian cryptocurrency exchange, is experiencing significant leadership transitions following a major security breach resulting in a Rs 378 crore loss. Mudita Chauhan, Chief Human Resource Officer, and Sridhar G, Chief Information Security Officer, have both resigned. These departures come after the earlier exits of CTO Vivek Gupta and legal head Tushar Tarun. CEO Sumit Gupta expressed gratitude for their contributions, emphasizing their impact on the company’s growth and resilience.

WazirX holds plan to 'socialise' ₹1,965-cr loss from breach: Report

CNBC

WazirX holds plan to 'socialise' ₹1,965-cr loss from breach: Report

Indian crypto exchange WazirX, that recently suffered losses worth ₹1,965 crore following a security breach, has put its plan to 'socialise' the losses among customers on hold, CNBC-TV18 reported. Following customer backlash, WazirX is now reportedly open to strategic investments, mergers and acquisitions. The exchange will likely propose a new solution to recuperate the losses in next few weeks.

Trackers

Active Indian VC’s

OG Capital Email

With a hands-on approach, OG Capital aims to invest in over 20 promising...

Accel Partners Email

Early and growth-stage investments in disruptive technology companies with...

Early-stage venture capital firm investing in technology startups in India. Focus on...

Access All Trackers

Startup Showcase Winners

Sept 2025

Your Health, Simplified with Smart Care

An ecosystem for curated creative partnerships

Your Health our Priority.

Enter Ongoing Startup Showcase

Top Users

Trending News on Medial

Reliance Jio Considers 2.5% IPO i ...

House-help startup Pync shuts dow ...

Nithin Kamath Says Now Is the Bes ...

Download the medial app to read full posts, comements and news.