Conselho de Revisão de Segurança Cibernética: Cultura de segurança da Microsoft ‘insuficiente’

### Microsoft Faces Criticism Over Cybersecurity Incident

Microsoft is facing intense scrutiny and criticism following a high-profile cybersecurity incident in May and June 2023. A report released by the Cyber Safety Review Board (CSRB) highlights the breach, where the Chinese hacking group Storm-0558 compromised Microsoft Exchange Online mailboxes of over 500 individuals and 22 organizations globally, including senior U.S. government officials.

#### Inadequate Security Culture and Public Communications Criticized

The CSRB report is particularly critical of Microsoft’s security culture, labeling it as “inadequate” and in need of an overhaul. Moreover, the report points out the company’s delayed response in correcting public communications regarding the breach, raising concerns about transparency and accountability.

#### Calls for Enhanced Security Measures

The report calls on Microsoft to refocus its priorities on developing robust security features over new product features. It suggests a revival of the “Trustworthy Computing” initiative pioneered by Microsoft co-founder Bill Gates in 2002, emphasizing the importance of safeguarding data and operations.

#### Microsoft’s Response and Future Initiatives

In response to the report, a Microsoft spokesperson highlighted the company’s commitment to enhancing security measures through initiatives like the Secure Future Initiative. Microsoft aims to strengthen its network infrastructure, improve processes, and enforce security benchmarks to mitigate cyber threats effectively.

#### Conclusion

As Microsoft grapples with the aftermath of the cybersecurity incident, the company faces mounting pressure to prioritize security and restore trust with customers. Moving forward, Microsoft will review the CSRB report for additional recommendations to bolster its cybersecurity efforts.

For more information, you can access the full CSRB report [here](https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf).