Google has published a review of Microsoft’s recent security issues, concluding that Microsoft is “unable to keep their systems and therefore their customers’ data safe.”In its report, Google calls Microsoft out for failing to correctly describe a security breach to the public last year where China-backed hackers infiltrated Microsoft Exchange’s systems, allowing them to access any Exchange account. Google cites the federal cybersecurity review board’s findings that Microsoft customers didn’t have enough information to determine whether they were at risk at the time, and Microsoft made a “decision not to correct” statements about the breach the board deemed “inaccurate.”Google argues that because the board determined Microsoft still doesn’t know how the attackers got the key to its Exchange systems, “a clear pattern of evidence” has emerged that Microsoft may not be able to protect itself or customers from future cyberattacks. PCMag has reached out to Microsoft for comment.”The repeated security challenges with Microsoft call for a better alternative for enterprises and public-sector organizations alike,” Google states in its report. “We believe Google Workspace is a safer alternative, with a proven track record of engineering excellence, deep investment in cutting-edge defenses, and a transparent culture that treats providing security for our customers as a profound responsibility.”Google is offering corporate and government discounts to switch from Microsoft’s services to Google Workspace Enterprise Plus, Bloomberg reports. Businesses can get 18 months free if they sign a three-year contract.Unfortunately, Microsoft has had more cybersecurity incidents besides the Exchange breach last year. In March, Microsoft said that Russian hackers managed to access its source code. Microsoft’s senior leadership saw their email accounts compromised, and federal agencies using Microsoft’s services may have also been impacted.
Recommended by Our Editors
A third-party cybersecurity firm reported this year that Microsoft left an Azure cloud server exposed because the company hadn’t password-protected it. The researchers were able to access the Microsoft server, which held data about its Bing search engine as well as other files containing passwords and other data. Microsoft claimed that server was only accessible through “internal networks.”This month, Microsoft’s EVP of Security Charlie Bell said the tech giant will do more to up its security practices after the high-profile breaches and take a security-first approach. “We will instill accountability by basing part of the compensation of the company’s Senior Leadership Team on our progress in meeting our security plans and milestones,” Bell said.
Like What You’re Reading?
Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
