undefined | Better HN

0 pointsjustinclift2y ago0 comments

Azure has a very bad reputation for terrible security, although weirdly a lot of enterprises don't seem to care. :(

0 comments

4 comments · 2 top-level

RyeCombinator2y ago· 2 in thread

Where can we fund more information about this?

justincliftOP2y ago

There are so many that it's just not funny. :(

• https://www.nbcnews.com/tech/security/scathing-federal-repor...

• https://www.wiz.io/blog/bingbang

• https://www.theverge.com/2023/7/12/23792371/security-breach-...

• https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a...

These are just the first few I've found for the last 12 months.

There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway.

Microsoft are actually really bad at this Cloud "security" thing. :( :( :(

Bognar2y ago

3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks.

Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing.

The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others.

Source: spent some time at MS

sumedh2y ago

> although weirdly a lot of enterprises don't seem to care. :(

Probably because Azure is cheaper than AWS and I am sure MS might be throwing some freebies/discounts if the customer is using Enterprise Office.

j / k navigate · click thread line to collapse