Microsoft slammed for poor security

Stefan Mileschin · 7th August 2023, 06:30

Tries to keep too much secret

Software King of the world Microsoft has been slammed by a security company for its poor security on Azure and for encouraging a "culture of toxic obfuscation."

Tenable CEO Amit Yoran said Vole was "grossly irresponsible" and mired in a "culture of toxic obfuscation."

Yoran slammed Vole for failing to fix a "critical" issue that gives hackers unauthorised access to data and apps managed by Azure AD, a Microsoft cloud offering for handling user authentication inside large organisations.

Tenable notified Microsoft of the problem in March and Microsoft reported 16 weeks later that it had been fixed. Tenable researchers told Microsoft that the fix was incomplete. Microsoft set a date for providing a complete fix to September 28.

"To give you an idea of how bad this is, our team very quickly discovered authentication secrets to a bank," Yoran wrote.

"They were so concerned about the issue's seriousness and ethics that we immediately notified Microsoft."

https://fudzilla.com/news/memory-and...-poor-security

7th August 2023, 06:30	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 149,092	Microsoft slammed for poor security Tries to keep too much secret Software King of the world Microsoft has been slammed by a security company for its poor security on Azure and for encouraging a "culture of toxic obfuscation." Tenable CEO Amit Yoran said Vole was "grossly irresponsible" and mired in a "culture of toxic obfuscation." Yoran slammed Vole for failing to fix a "critical" issue that gives hackers unauthorised access to data and apps managed by Azure AD, a Microsoft cloud offering for handling user authentication inside large organisations. Tenable notified Microsoft of the problem in March and Microsoft reported 16 weeks later that it had been fixed. Tenable researchers told Microsoft that the fix was incomplete. Microsoft set a date for providing a complete fix to September 28. "To give you an idea of how bad this is, our team very quickly discovered authentication secrets to a bank," Yoran wrote. "They were so concerned about the issue's seriousness and ethics that we immediately notified Microsoft." https://fudzilla.com/news/memory-and...-poor-security

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Even Zuckerberg mocks Apple’s iMessage over poor security	Stefan Mileschin	WebNews	0	19th October 2022 10:58
UK computer modelling slammed	Stefan Mileschin	WebNews	0	3rd March 2021 08:39
Apple slammed by advertisers	Stefan Mileschin	WebNews	0	6th July 2020 09:01
Consumers will flee poor security practices	Stefan Mileschin	WebNews	0	16th June 2020 13:52
US government makes it harder to sue corporates over poor IT security	Stefan Mileschin	WebNews	0	31st October 2017 05:19
Apple’s face security is so poor a child can break it	Stefan Mileschin	WebNews	0	30th September 2017 07:59
Microsoft falsely accused Intel for poor Surface drivers	Stefan Mileschin	WebNews	0	15th August 2017 13:17
Drupal floored by poor update security	Stefan Mileschin	WebNews	0	10th January 2016 11:03
Microsoft Disputes Poor MSE Grade	Stefan Mileschin	WebNews	0	18th January 2013 07:26
Microsoft Security Patch Can Cause Security Issues to Internet Explorer	jmke	WebNews	0	18th August 2006 10:09