all InfoSec news
US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack
Schneier on Security www.schneier.com
US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior U.S. government officials.
From the executive summary:
The Board finds that this intrusion was preventable and should never have occurred. The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in the technology ecosystem and the …
attack board china chinese chinese government cyber cyber safety cyber safety review board email emails exchange executive government hack hacking hack us intrusion microsoft microsoft exchange officials privacy report review safety serious summer u.s. government