Displaying items by tag: Storm0558

Microsoft has been mauled over "a cascade of security failures" that led to a breach of the company's Azure cloud platform by a group known as Storm-0558, with the US Cyber Safety Review Board concluding that the intrusion "should never have happened".

Cloud security company Wiz.io says there are many unanswered questions raised by Microsoft's final report into a breach of its Azure cloud platform, pointing out that the threat actor, given the name Storm-0558, may have been forging authentication tokens for more than two years given the timeline in the report.

Respected security practitioner Juan Andres Guerrero-Saade has criticised the manner in which Microsoft has reacted to the recent breach of its Azure cloud service, describing it as "enraging, duplicitous, disappointing, counter-productive and, most importantly, unnecessary".