Call us now:
As mentioned in yesterday Homeland Security Committee hearing in which Brad Smith, Vice Chairman and President of Microsoft presented and was questioned by U.S political leaders. This article was bought up several times, so well worth a read.
It discusses a flaw related to Microsoft Active Director dating back in 2016, which may have contributed to a breach in Microsoft and have broader nation security implications. The Microsoft engineer reported the vulnerability to senior management, as did outside security companies..
The enclosed raises questions about the SolarWinds hack currently being tried between the SEC and SolarWinds. As the threat vector used in the SolarWinds hack in some part related to the adoption of Seamless SSO in AD Federated Services (AD FS), the Microsoft flaw previously identified in 2016. As was mentioned in yesterdays DHS committee the SolarWinds attack exposed sensitive U.S data including data relating to U.S nuclear security information and national institute of health data, a threat that may have been exacerbated by the Microsoft AD FS vulnerability.
@Thaddeus Dziekanowski Brian D. McCarthy
Veritas GRC U.S. Department of Homeland Security Microsoft
#cybersecurity #cyberriskmanagement #
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7207332641396719616