Cyber board deems Chinese hack of US officials avoidable

TLDR:

Key Points:

• The US Cyber Safety Review Board determined that a Chinese hack of US officials’ emails was preventable.
• Microsoft was faulted for security lapses and lack of transparency.

In a report, the US Cyber Safety Review Board identified Microsoft’s decisions that decreased security, risk management, and customer trust. The hack, carried out by a Chinese hacking group, compromised a Microsoft engineer’s account. Microsoft responded by mobilizing engineering teams to improve security measures and review the final report for recommendations. The board recommended Microsoft make security reforms across all products. Last year, senior US officials’ emails were stolen, raising concerns about cybersecurity.