June 28th, 2024

Microsoft a national security threat says ex-White House cyber policy director

A former White House cyber policy director raises national security concerns over Microsoft's control in US government IT. Calls for diversification and enhanced cybersecurity amid debates on tech companies' role in national security.

Read original articleLink Icon
Microsoft a national security threat says ex-White House cyber policy director

A former White House cyber policy director, AJ Grotto, has raised concerns about Microsoft's significant control over IT in the US federal government, labeling the company's recent security failures as a national security issue. Grotto's remarks highlight the extent of Microsoft's influence within critical government systems. The discussion underscores the potential risks associated with relying heavily on a single technology provider for essential services. The comments come amidst growing scrutiny of Microsoft's security track record and its implications for national security. Concerns about the company's dominance and the impact of its security lapses on critical infrastructure have sparked debates about the need for diversification and enhanced cybersecurity measures in government IT systems. The conversation reflects broader discussions around the role of technology companies in national security and the importance of robust cybersecurity practices in safeguarding sensitive government information.

Related

Microsoft admits no guarantee of sovereignty for UK policing data

Microsoft admits no guarantee of sovereignty for UK policing data

Microsoft admits inability to guarantee UK policing data sovereignty on its public cloud, potentially breaching UK data protection laws. Concerns persist despite company's efforts to address issues, impacting all UK government users.

MSFT wants Local accounts gone after it erases its guide on how to create them

MSFT wants Local accounts gone after it erases its guide on how to create them

Microsoft has removed a guide on converting Microsoft accounts to Local accounts, emphasizing their preference for Microsoft sign-ins. Users may face challenges transitioning due to privacy concerns.

Google: Stop Burning Counterterrorism Operations

Google: Stop Burning Counterterrorism Operations

Google's Project Zero and TAG exposed a U.S.-allied government's counterterrorism operation, sparking debate on the impact of revealing such information. Cyber operations play a crucial role in counterterrorism efforts, balancing intelligence gathering with minimizing risks.

Thwarting cyberattacks from China is DHS's top infrastructure security priority

Thwarting cyberattacks from China is DHS's top infrastructure security priority

The Department of Homeland Security prioritizes countering cyber threats from China until 2025. Emphasis is on protecting critical infrastructure, addressing AI risks, supply chain vulnerabilities, and China's national security risks.

Windows: Insecure by Design

Windows: Insecure by Design

Ongoing security issues in Microsoft Windows include vulnerabilities like CVE-2024-30080 and CVE-2024-30078, criticized for potential remote code execution. Concerns raised about privacy with Recall feature, Windows 11 setup, and OneDrive integration. Advocacy for Linux desktops due to security and privacy frustrations.

Link Icon 4 comments
By @Jtsummers - 4 months
https://www.theregister.com/2024/04/21/microsoft_national_se... - actual article link instead of the forum which cuts off most of the article contents.
By @ChrisArchitect - 4 months
By @bluedino - 4 months
I mean, isn't the possibility of any of the major cloud vendors getting 'hacked', or cryptolocked, one of the biggest threads to any country?

I'd say Microsoft is the most likely of the big three for this to happen to. It seems like every few weeks there's some discovery of a big security breach there.