News for hackers. Stuff that matters.

A comment on Microsoft actions following attack by nation state actor Midnight Blizzard. Parent comment

Re:Microsoft actions following attack by nation state actor ... by blibble on Friday January 19, 2024 @06:30PM (#39062861)
> but what is the alternative? Google? AWS? Self host?

I mean, given this was possible:

> used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts

pretty much anything is going to be better than letting Microsoft host your email/corporate data

[ Parent | on HN ]
Re:Microsoft actions following attack by nation state actor ... by redavni on Friday January 19, 2024 @07:24PM (#39063295)
You realize the Chinese government has compromised Gmail accounts through an dedicated interface for law enforcement right? I really don't see how you think Gmail is better. This is just bad passwords/lack of 2FA probably.
[ Parent | on HN ]
Re:Microsoft actions following attack by nation state actor ... by roca on Friday January 19, 2024 @08:28PM (#39063710)
Got a reference for that?

To be clear: I've never heard of any such thing. I happen to work for Google, but I'm open the possibility that this happened and I didn't hear about it.

[ Parent | on HN ]
Re:Microsoft actions following attack by nation state actor ... by ivlad on Friday January 19, 2024 @09:32PM (#39064071)
They probably confuse it with Russians hacking Yahoo and having access to user account admin interface: https://www.csoonline.com/article/560623/inside-the-russian-...
[ Parent | on HN ]
Re:Microsoft actions following attack by nation state actor ... by redavni on Sunday January 21, 2024 @12:49PM (#39080709)
https://www.cnn.com/2010/OPINION/01/23/schneier.google.hacki...
[ Parent | on HN ]