Microsoft is pivoting its company culture to make security a top priority, President Brad Smith testified to Congress on Thursday, promising that security will be ‚Äúmore important even than the company‚Äôs work on artificial intelligence.‚ÄĚ

Satya Nadella, Microsoft‚Äôs CEO, ‚Äúhas taken on the responsibility personally to serve as the senior executive with overall accountability for Microsoft‚Äôs security,‚ÄĚ Smith told Congress.

His testimony comes after Microsoft admitted that it could have taken steps to prevent two aggressive nation-state cyberattacks from China and Russia.

According to Microsoft whistleblower Andrew Harris, Microsoft spent years ignoring a vulnerability while he proposed fixes to the ‚Äúsecurity nightmare.‚ÄĚ Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica¬†reported.

This apparent negligence led to¬†one of the largest cyberattacks in US history,¬†and officials‚Äô sensitive data was compromised due to Microsoft‚Äôs security failures. The China-linked hackers stole 60,000 US State Department emails, Reuters¬†reported. And several federal agencies were hit, giving attackers access to sensitive government information, including data from the National Nuclear Security Administration and the National Institutes of Health, ProPublica reported. Even Microsoft itself was breached, with a Russian group accessing senior staff emails this year, including their ‚Äúcorrespondence with government officials,‚ÄĚ Reuters reported.

  • @reversebananimals
    link
    English
    226‚ÄĘ1 month ago

    To reinforce the shift in company culture toward ‚Äúempowering and rewarding every employee to find security issues, report them,‚ÄĚ and ‚Äúhelp fix them,‚ÄĚ Smith said that Nadella sent an email out to all staff urging that security should always remain top of mind.

    Yeah that ought to do it.

    • @WhatAmLemmy
      link
      English
      171‚ÄĘ1 month ago

      Lol. Considering it was senior management that ignored staff, this statement is even fucking dumber than it sounds.

    • @[email protected]
      link
      fedilink
      English
      91‚ÄĘ1 month ago

      That’s just barely thoughts-and-prayers level. They could at least schedule a mandatory meeting that interrupts everyone’s day for half an hour.

      • @Serinus
        link
        English
        41‚ÄĘ1 month ago

        Usually they set up a hotline which may or may not get you fired.

        • @[email protected]
          link
          fedilink
          English
          48‚ÄĘ1 month ago

          Using the hotline won’t get you fired, but somehow - for totally unrelated reasons - after using it you’ll end up on a PIP with untenable goals, and that will get you fired.

    • Cosmo
      link
      English
      31‚ÄĘ1 month ago

      "Of course, fixing these kinds of issues won’t push your product deadlines back at all. But we’ll be thankful to you! "

    • @[email protected]
      link
      fedilink
      English
      23‚ÄĘ1 month ago

      Same energy as ‚ÄúYou have unlimited PTO here, but we also have this nifty little thing called performance metrics‚ÄĚ

    • Semi-Hemi-Lemmygod
      link
      English
      22‚ÄĘ1 month ago

      ‚ÄúNext week to improve employee morale we will have a pizza party‚ÄĚ - Nadella, probably

      • rem26_art
        link
        fedilink
        8‚ÄĘ1 month ago

        they could throw a pizza party for their government clients. Less work than fixing the problem